2985 matches found
Information disclosure
Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281...
CVE-2015-0583
Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281...
CVE-2015-0583
CVE-2015-0583 affects Cisco WebEx Meetings Server/Meeting Center. A vulnerability in the file: URI handling could cause information disclosure by unauthenticated remote attackers who view application URL requests containing sensitive data. Impact is sensitive information exposure via URLs; adviso...
Cisco WebEx Meetings Server User Enumeration Vulnerability
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to guess valid user accounts on the targeted system. The vulnerability exists because the affected software fails to refresh the CAPTCHA on the login page. An attacker could exploit this vulnerability b...
Cisco WebEx Meetings Server Information Disclosure Vulnerability (CNVD-2015-00277)
Cisco WebEx Meetings are web conferencing solutions. An information disclosure vulnerability exists in Cisco WebEx Meetings Server, which can be exploited by an attacker to obtain sensitive information...
Cisco WebEx Meetings Server User Enumeration Vulnerability (CNVD-2015-00224)
Cisco WebEx Meetings are web conferencing solutions. The web framework in Cisco WebEx Meetings Server generates different return messages based on the presence or absence of a URL request for a username, allowing a remote attacker to enumerate user accounts through a series of requests...
Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability
Cisco WebEx Meetings are web conferencing solutions. A cross-site scripting vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inject arbitrary web script or HTML via email parameters...
Unspecified Vulnerability in Cisco WebEx Meetings Server
Cisco WebEx Meetings are web conferencing solutions. The outlookpa component in Cisco WebEx Meetings Server fails to properly validate API inputs, allowing a remote attacker with a carefully constructed URL to be able to modify the invitation list for a meeting...
Cisco WebEx Meetings Server User Enumeration Vulnerability (CNVD-2015-00225)
Cisco WebEx Meetings are web conferencing solutions. A user enumeration vulnerability exists in Cisco WebEx Meetings Server, which could be exploited by an attacker to obtain valid user accounts via a brute force attack...
Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability (CNVD-2015-00233)
Cisco WebEx Meetings are web conferencing solutions. A cross-site request forgery vulnerability exists in Cisco WebEx Meetings Server, which allows remote attackers to exploit the vulnerability to hijack the authentication of arbitrary users...
Cisco WebEx Meetings Server Encryption Password Disclosure Vulnerability
Cisco WebEx Meetings are web conferencing solutions. An encrypted password information disclosure vulnerability exists in OutlookAction LI in Cisco WebEx Meetings Server, which allows remote authenticated users to obtain sensitive encrypted password information via unspecified vectors...
Cisco WebEx Meetings Server Authentication Bypass Vulnerability
Cisco WebEx Meetings are web conferencing solutions. An authentication bypass vulnerability in the play/modules component in Cisco WebEx Meetings Server allows remote attackers to gain administrator privileges via a crafted API request...
CVE-2014-8036
The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invite list via a crafted URL, aka Bug ID CSCuj40254...
CVE-2014-8035
The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247...
Authentication flaw
The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invite list via a crafted URL, aka Bug ID CSCuj40254...
CVE-2014-8036
CVE-2014-8036 affects the outlookpa component in Cisco WebEx Meetings Server, where improper sanitization/validation of API input enables an unauthenticated, remote attacker to modify the invite list of scheduled meetings via crafted URL requests. The vulnerability stems from insufficient input v...
CVE-2014-8035
The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247...
CVE-2014-8035
Cisco WebEx Meetings Server’s web framework exposes user enumeration via crafted URL requests. The vulnerability stems from improper sanitization of the returned message, causing different responses depending on whether a username exists. An unauthenticated, remote attacker could enumerate valid ...
CVE-2014-8036
The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invite list via a crafted URL, aka Bug ID CSCuj40254...