Cisco WebEx Meeting Center URL Redirection Vulnerability

A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts. The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An attacker could exploit this vulnerability...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in its WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit these vulnerabilities to take control of an affected system. US-CERT encourages users and...

PT-2017-3594

Name of the Vulnerable Software and Affected Versions: Cisco WebEx Meetings Server affected versions not specified Cisco WebEx Meetings affected versions not specified Cisco WebEx Business Suite affected versions not specified Cisco WebEx Network Recording Player affected versions not specified...

Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability (CNVD-2017-32925)

Cisco WebEx Meetings Server is a highly secure, highly available, fully virtualized behind-the-firewall meeting solution that combines audio, video, and Web conferencing in one solution. A cross-site scripting vulnerability exists in Cisco WebEx Meetings Server. The vulnerability arises because t...

Cisco WebEx Meetings Server Information Disclosure Vulnerability (CNVD-2017-32926)

Cisco WebEx Meetings Server is a highly secure, highly available, fully virtualized behind-the-firewall meeting solution that combines audio, video, and Web conferencing in one solution. An information disclosure vulnerability exists in Cisco WebEx Meetings Server. A remote attacker could obtain...

Design/Logic Flaw

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to the HTTP header...

Cross site scripting

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

CVE-2017-12294

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

CVE-2017-12295

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to the HTTP header...

CVE-2017-12295

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to the HTTP header...

CVE-2017-12295

Cisco WebEx Meetings Server is affected by an information-disclosure vulnerability (CVE-2017-12295) where the HTTP header replies can reveal internal network data to unauthenticated remote attackers. The root cause is exposure of sensitive information in HTTP responses, enabling reconnaissance. T...

CVE-2017-12294

Cisco WebEx Meetings Server is affected by CVE-2017-12294, a cross-site scripting (XSS) vulnerability caused by insufficient input validation in certain web-server parameters. An authenticated, remote attacker could lure a user to a crafted link or intercept a request to inject malicious script, ...

CVE-2017-12294

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

CVE-2017-12295: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to the HTTP header...

PT-2017-12469

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description A cross-site scripting XSS issue exists due to insufficient input validation of parameters passed to the web server. An attacker could exploit this by convincing a user to...

CVE-2017-12294: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

PT-2017-12470

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description A vulnerability could allow an unauthenticated, remote attacker to access sensitive data about the application. The issue is due to the HTTP header reply from the server t...

Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

Cisco WebEx Meetings Server Information Disclosure Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to the HTTP header...

Authentication flaw

Cisco WebEx Meetings Server before 1.1 uses meeting IDs with insufficient entropy, which makes it easier for remote attackers to bypass authentication and join arbitrary meetings without a password, aka Bug ID CSCuc79643...