2985 matches found
Cisco WebEx Meetings Host Calendar Download Vulnerability
A vulnerability in Cisco WebEx Meetings could allow an unauthenticated, remote attacker to access and download calendar files without authorization. The vulnerability is due to inconsistent authorization checks. An attacker could exploit this vulnerability by enumerating scheduled meetings and...
Cisco WebEx Meetings Reflected Cross-Site Scripting Vulnerability
A vulnerability in Cisco WebEx Meetings could allow an unauthenticated, remote attacker to perform reflected cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability by...
CVE-2015-4194
The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive informati...
Code injection
The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive informati...
CVE-2015-4194
Cisco WebEx Meeting Center’s web-based admin interface is vulnerable to user enumeration via inconsistent login error messages. An unauthenticated, remote attacker can determine whether a username exists and whether it has administrative privileges, per Cisco advisory Cisco-SA-20150618-CVE-2015-4...
Cisco WebEx Meeting Center Web-Based Administrative Interface User Enumeration Vulnerability
A vulnerability in the web-based administrative interface of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to enumerate valid usernames and determine if the usernames have administrative privileges. The vulnerability is due to a logic error in the handling of invalid...
Multiple Cross-Site Scripting Vulnerabilities in Cisco WebEx Meetings Server
Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. Cisco WebEx Meetings Server has multiple cross-site scripting vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or...
CVE-2015-0634
Cross-site scripting XSS vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310...
Cross site scripting
Cross-site scripting XSS vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310...
CVE-2015-0634
Cisco WebEx Meetings Server vulnerable to a cross‑site scripting (XSS) in the administrative interface for versions 2.5 and 2.5.0.997. The issue enables remote attackers to inject arbitrary script/HTML via a crafted URL (Bug ID CSCuq86310). Impact is authenticated user impact within the browser c...
CVE-2015-0634
Cross-site scripting XSS vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310...
Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability
A vulnerability within the administrative interface of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input submitted to an affected device. An unauthenticate...
CVE-2015-0668
Cross-site scripting XSS vulnerability in the administration portal in Cisco WebEx Meetings Server 2.5 and 2.5.99.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq66737...
Cross site scripting
Cross-site scripting XSS vulnerability in the administration portal in Cisco WebEx Meetings Server 2.5 and 2.5.99.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq66737...
CVE-2015-0668
CVE-2015-0668 is an XSS vulnerability in the Cisco WebEx Meetings Server administration portal affecting versions 2.5 and 2.5.99.2. The issue arises from insufficient validation of user-supplied input in the admin portal, enabling an unauthenticated, remote attacker to inject arbitrary scripts/HT...
CVE-2015-0668
Cross-site scripting XSS vulnerability in the administration portal in Cisco WebEx Meetings Server 2.5 and 2.5.99.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq66737...
Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability (CNVD-2015-01883)
Cisco WebEx Meetings are web conferencing solutions. A cross-site scripting vulnerability in the administration portal in Cisco WebEx Meetings Server versions 2.5 and 2.5.99.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cisco WebEx Meetings Server Administrative Portal Cross-Site Scripting Vulnerability
A vulnerability in the administration portal page of the Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks. The vulnerability is due to insufficient validation of user-supplied input submitted to the administration portal page ...
KLA10504 Multiple vulnerabilities in Cisco products
Multiple serious vulnerabilities have been found in Cisco products. Below is a complete list of vulnerabilities 1. Improper serial port restrictions in Cisco Virtual TelePresence Server Software can be exploited locally via a specially designed OS commands; 2. An unknown vulnerability in Cisco CS...
