CVE-2015-0589

The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460...

Design/Logic Flaw

The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460...

CVE-2015-0589

The CVE-2015-0589 issue affects Cisco WebEx Meetings Server (versions 1.0–1.5). The root cause is improper user input validation in the administrative web interface, allowing an authenticated, remote attacker to inject commands and execute arbitrary OS commands with root privileges via unspecifie...

CVE-2015-0589

The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460...

Cisco WebEx Meetings Server Command Injection Vulnerability

Cisco WebEx Meetings are web conferencing solutions. A command injection vulnerability exists in Cisco WebEx Meetings Server due to the program failing to properly filter user-supplied input. Allowing an attacker to execute arbitrary commands within the context of the affected application...

Cisco WebEx Meetings Server Command Injection Vulnerability

A vulnerability in the administrative web interface of Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary commands on the affected system and on the devices managed by the affected system. The vulnerability is due to improper user input validation. An...

CVE-2015-0597

The Forgot Password feature in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159...

CVE-2015-0596

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163...

CVE-2015-0595

The XMLAPI in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079...

Information disclosure

The XMLAPI in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163...

CVE-2015-0596

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163...

CVE-2015-0596

A CSRF vulnerability (CVE-2015-0596) affects Cisco WebEx Meetings Server 1.5(.1.131) and earlier, allowing remote attackers to hijack user authentication under Bug ID CSCuj67163. Cisco released a security advisory; exploitation details are not fully provided in the initial documents, but multiple...

CVE-2015-0597

Cisco WebEx Meetings Server vulnerability CVE-2015-0597 allows remote attackers to enumerate administrator accounts via crafted packets in the Forgot Password process. Affected are Cisco WebEx Meetings Server 1.5(.1.131) and earlier. The root cause is insufficient input validation, enabling unaut...

CVE-2015-0595

CVE-2015-0595 affects Cisco WebEx Meetings Server: the XMLAPI interface allows remote attackers to disclose sensitive information by reading crafted GET return messages. Root cause is improper sanitization of return messages in the XMLAPI (Bug CSCuj67079). Affected are 1.5(.1.131) and earlier rel...

CVE-2015-0595

The XMLAPI in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079...

CVE-2015-0597

The Forgot Password feature in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159...

Cisco WebEx Meetings Server User Enumeration Vulnerability (CNVD-2015-00894)

Cisco WebEx Meetings are web conferencing solutions. A security vulnerability exists in Cisco WebEx Meetings Server that allows an attacker to send special messages to enumerate administrator accounts...

Cisco WebEx Meetings Server User Enumeration Vulnerability

A vulnerability in the Forgot Password process of the Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to enumerate a valid administrator account. The vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by submitting...

Cisco WebEx Meetings Server XMLAPI Vulnerability

A vulnerability in the XML application programming interface API of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view sensitive information. The vulnerability is due to improper sanitization of return messages. An attacker could exploit this vulnerability by...