2985 matches found
CVE-2014-8032
The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information via unspecified vectors, aka Bug IDs CSCuj40453 and CSCuj40449...
CVE-2014-8030
Cross-site scripting XSS vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inject arbitrary web script or HTML via the email parameter, aka Bug ID CSCuj40381...
CVE-2014-8031
Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456...
Cross site scripting
Cross-site scripting XSS vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inject arbitrary web script or HTML via the email parameter, aka Bug ID CSCuj40381...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456...
Code injection
The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain administrator access via crafted API requests, aka Bug ID CSCuj40421...
Design/Logic Flaw
The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information via unspecified vectors, aka Bug IDs CSCuj40453 and CSCuj40449...
CVE-2014-8030
Cisco WebEx Meetings Server contains a Cross-Site Scripting (XSS) vulnerability in the sendPwMail.do page that allows an unauthenticated, remote attacker to inject arbitrary script/HTML via the email parameter. Root cause is improper sanitization of the email parameter. The CVE is CVE-2014-8030. ...
CVE-2014-8032
CVE-2014-8032 concerns Cisco WebEx Meetings Server where the OutlookAction LI may disclose a user’s encrypted password to an authenticated remote attacker. The Cisco advisory states the issue arises from the server returning encrypted password values and that authenticated access (potentially on ...
CVE-2014-8031
Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456...
CVE-2014-8030
Cross-site scripting XSS vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inject arbitrary web script or HTML via the email parameter, aka Bug ID CSCuj40381...
CVE-2014-8032
The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information via unspecified vectors, aka Bug IDs CSCuj40453 and CSCuj40449...
CVE-2014-8033
The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain administrator access via crafted API requests, aka Bug ID CSCuj40421...
CVE-2014-8031
CVE-2014-8031 affects Cisco WebEx Meetings Server and is linked to a CSRF in the web framework due to insufficient CSRF protections. An unauthenticated, remote attacker could trick an authenticated user into following a malicious link to perform the action on behalf of that user, effectively hija...
CVE-2014-8033
The CVE-2014-8033 issue affects Cisco WebEx Meetings Server, specifically the play/modules component. It enables an unauthenticated, remote attacker to gain administrator privileges by sending crafted API requests to a vulnerable device, due to an exposed API. Impact described as administrator ac...
CVE-2014-3400
Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344...
Code injection
Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344...
CVE-2014-3400
CVE-2014-3400 affects Cisco WebEx Meetings Server. Remote authenticated users can obtain sensitive information by reading logs. The description ties the issue to Bug IDs CSCuq36417 and CSCuq40344. No specific root cause, affected versions, exploit details, or remediation are provided in the conne...