CVE-2016-1410: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by 1 attending or 2 hosting a meeting, aka Bug ID CSCux84312...

PT-2016-4768

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center Original Release Base Description The issue allows remote attackers to obtain sensitive information about username validity by attending or hosting a meeting. Recommendations For Cisco WebEx Meeting Center Original...

Cisco WebEx Meeting Center User Account Enumeration Vulnerability

Cisco WebEx Meeting Center is a set of WebEx meeting solutions in the United States Cisco Cisco company's network of online meeting products. The product invites others to join the meeting via e-mail or instant messaging IM, and supports online product demonstrations, information sharing, and mor...

Cisco WebEx Meeting Center Improved Logging Capabilities

Cisco WebEx Meeting Center user accounts are subject to enumeration via Personal Meeting Rooms PMRs. This advisory documents that an administrative update has been made to improve the logging of connections to the PMRs. This advisory is available at the following link:...

Cisco WebEx Meetings Server Open Redirect Vulnerability

Cisco WebEx Meetings Server is a versatile meeting solution that includes audio, video, and Web conferencing in the WebEx Meeting Solution. An open redirection vulnerability exists in Cisco WebEx Meetings Server that allows an attacker to construct malicious URIs, trick users into parsing them, a...

CVE-2016-4349

Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current...

CVE-2016-4349

Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current...

CVE-2016-1389

Open redirect vulnerability in Cisco WebEx Meetings Server CWMS 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695...

CVE-2016-1389

Open redirect vulnerability in Cisco WebEx Meetings Server CWMS 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695...

Open redirect

Open redirect vulnerability in Cisco WebEx Meetings Server CWMS 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695...

Design/Logic Flaw

Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current...

CVE-2016-4349

Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current...

CVE-2016-1389

Open redirect vulnerability in Cisco WebEx Meetings Server CWMS 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695...

CVE-2016-1389

Cisco WebEx Meetings Server (CWMS) 2.6 is affected by an Open Redirect vulnerability in the web interface caused by improper input validation. Exploitation could allow remote attackers to redirect users to arbitrary external sites, enabling phishing attacks. The CVE-2016-1389 entry corresponds to...

CVE-2016-4349

The CVE-2016-4349 entry describes an Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012. The issue allows local privilege escalation by placing one of several DLLs (cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, se...

PT-2016-4756

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. Recommendations For Cisco WebEx Meetings Server version 2.6, update to a...

Cisco WebEx Meetings Server Open Redirect Vulnerability

A vulnerability in the Cisco WebEx Meetings Server CWMS web interface could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this...

CVE-2016-4349: Undefined Security Weakness

Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current...

CVE-2016-1389: Undefined Security Weakness

Open redirect vulnerability in Cisco WebEx Meetings Server CWMS 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695...

PT-2016-5896

Name of the Vulnerable Software and Affected Versions Cisco WebEx Productivity Tools version 2.40.5001.10012 Description The issue allows local users to gain privileges via a Trojan horse file, specifically by placing malicious versions of certain DLL files in the current working directory. These...