CVE-2017-3797

CVE-2017-3797 affects Cisco WebEx Meetings Server. An unauthenticated remote attacker could view the fully qualified domain name of the Cisco WebEx administration server due to insufficient masking in HTTP responses. Cisco’s advisory confirms that updates exist to address this information-disclos...

CVE-2017-3799

CVE-2017-3799 concerns a URL-parameter open-redirect vulnerability in Cisco WebEx (WebEx Meeting Center). The Cisco advisory attributes the issue to insufficient input validation, where an attacker could craft a link containing a remote site URL in the affected parameter to redirect users to a ma...

CVE-2017-3794: Cross-Site Request Forgery (CSRF)

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against an administrative user. More Information: CSCuz03317. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12...

CVE-2017-3796: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. More Information: CSCuz03353. Known Affected Releases: 2.6...

CVE-2017-3795: Improper Authentication

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. More Information: CSCuz03345. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12...

CVE-2017-3799: URL Redirection to Untrusted Site

A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection. More Information: CSCzu78401. Known Affected Releases: T28.1...

CVE-2017-3797: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco WebEx administration server. More Information: CSCvb60655. Known Affected Releases: 2.7...

WebEx browser extension command execution

Added: 01/26/2017 CVE: CVE-2017-3823 BID: 95737 Background Cisco WebEx is an online meeting solution. Extensions are available for all major web browsers, which enable users to join meetings from their browser. Problem A vulnerability in the WebEx browser extensions allows command execution when ...

Cisco WebEx Meetings Server and Center Remote Code Execution (CVE-2017-3823)

A remote code execution vulnerability exists in Cisco WebEx Meetings Server and WebEx Meetings Center browser extensions. The vulnerability is due to a design weakness in the API response parser within the extensions.A remote unauthenticated attacker could exploit this vulnerability by enticing a...

PT-2017-16102

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.7 Description A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco WebEx administration server. Recommendation...

PT-2017-16104

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center version T28.1 Description A vulnerability in a URL parameter could allow an unauthenticated, remote attacker to perform site redirection. Recommendations For Cisco WebEx Meeting Center version T28.1, update to a...

PT-2017-16100

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. Recommendations For...

PT-2017-16101

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. Recommendations For Cisco WebEx Meetings...

PT-2017-16099

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against an administrative user...

WebEx browser extension command execution

Added: 01/26/2017 CVE: CVE-2017-3823 BID: 95737 Background Cisco WebEx is an online meeting solution. Extensions are available for all major web browsers, which enable users to join meetings from their browser. Problem A vulnerability in the WebEx browser extensions allows command execution when ...

WebEx browser extension command execution

Added: 01/26/2017 CVE: CVE-2017-3823 BID: 95737 Background Cisco WebEx is an online meeting solution. Extensions are available for all major web browsers, which enable users to join meetings from their browser. Problem A vulnerability in the WebEx browser extensions allows command execution when ...

try.webex.com XSS vulnerability

Vulnerable URL: http://try.webex.com/meet/sem/gbanner.asp?VC=21%22--%3E%3C/script%3E%3Csvg/onload=%27;alert/openbugbounty/;%27%3E=10131741%22--%3E%3C/script%3E%3Csvg/onload=%27;alert/openbugbounty/;%27%3E==ca-pub-9207260018349015=2=teche1013174 Details: Description| Value ---|--- Patched:| Yes, a...

webex.co.in XSS vulnerability

Vulnerable URL: https://www.webex.co.in/javascript/cookieCode.php?jsref=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 212714 VIP website status:| No Check webex.co.i...

Cisco WebEx Meetings Server Remote Code Execution Vulnerability

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A remote command execution vulnerability exists in Cisco WebEx Meetings Server that stems from a failure to properl...

Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability (CNVD-2017-00872)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A cross-site request forgery vulnerability exists in Cisco WebEx Meetings Server, which can be exploited by an...