CVE-2016-1447

Cisco WebEx Meetings Server 2.6 is affected by a reflected XSS in the administrator interface (Bug ID CSCuy83194). The issue stems from insufficient input sanitization, allowing an unauthenticated, remote attacker to craft a URL that injects arbitrary script/HTML in an administrator session. Expl...

CVE-2016-1449

Cisco WebEx Meetings Server 2.6 is affected by CVE-2016-1449: a reflected XSS caused by insufficient validation of user-supplied input, exploitable via a crafted URL to inject arbitrary script in a user’s context. Cisco’s advisory (Cisco Security Advisory cisco-sa-20160714-wms3) notes that softwa...

CVE-2016-1450

Cisco WebEx Meetings Server 2.6 is affected by a remote authenticated command-injection vulnerability tied to file-type handling during uploads (CVE-2016-1450, Bug ID CSCuy92715). The issue allows an authenticated attacker to craft upload content that leads to arbitrary command execution on the s...

CVE-2016-1446: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuy83200...

CVE-2016-1449: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy92711...

CVE-2016-1450: Improper Input Validation

Cisco WebEx Meetings Server 2.6 allows remote authenticated users to conduct command-injection attacks via vectors related to an upload's file type, aka Bug ID CSCuy92715...

PT-2016-4794

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco WebEx Meetings Server version 2.6, update to a version that contains a fix...

PT-2016-4795

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description A cross-site scripting XSS issue exists in the administrator interface, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions o...

PT-2016-4797

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations For Cisco WebEx Meetings Server version 2.6, update to a...

PT-2016-4798

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description The issue allows remote authenticated users to conduct command-injection attacks. This is related to vectors involving an upload's file type. Recommendations For Cisco WebEx Meetings Server...

CVE-2016-1447: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuy83194...

Cisco WebEx Meetings Server Reflected Cross-Site Scripting Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to perform reflected cross-site scripting XSS attacks. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability b...

Cisco WebEx Meetings Server Administrator Interface Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...

Cisco WebEx Meetings Server Administrator Interface Reflected Cross-Site Scripting Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. The vulnerability is due to insufficient sanitization of user-supplied input by the affected software. An unauthenticated, remote attacker could...

Cisco WebEx Meetings Server Command Injection Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability occurs due to the expectation of a certain file type during an upload. An attacker could exploit this vulnerability by using crafted command...

Cisco WebEx Meetings Server Administrator Interface SQL Injection Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The vulnerability is due to a lack of input validation on user-supplied input in SQL queries. An attacker could exploit this...

CVE-2016-1410

Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by 1 attending or 2 hosting a meeting, aka Bug ID CSCux84312...

Information disclosure

Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by 1 attending or 2 hosting a meeting, aka Bug ID CSCux84312...

CVE-2016-1410

Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by 1 attending or 2 hosting a meeting, aka Bug ID CSCux84312...

CVE-2016-1410

CVE-2016-1410 affects Cisco WebEx Meeting Center (Original Release Base). The vulnerability allows remote attackers to determine whether a username exists by participating in or hosting a meeting, enabling information disclosure of username validity. Documented impact values include CVSSv2/3 base...