help.webex.com XSS vulnerability

Vulnerable URL: https://help.webex.com/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Cisco WebEx Meetings - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cisco WebEx Meetings published at the 'play' market has multiple vulnerabilities...

Vulnerabilities in the software for Cisco WebEx Meetings Server, which allow attackers to inject arbitrary Web or HTML code

Multiple vulnerabilities in the software for Cisco WebEx Meetings Server exist due to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary Web or HTML code remotely...

Multiple Cross-Site Scripting Vulnerabilities in Cisco WebEx Meetings Server

Cisco WebEx Meetings Server is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. Multiple cross-site scripting vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject...

CVE-2016-1309

Multiple cross-site scripting XSS vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843...

CVE-2016-1309

Multiple cross-site scripting XSS vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843...

CVE-2016-1309

Multiple cross-site scripting XSS vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843...

CVE-2016-1309

Cisco WebEx Meetings Server 2.5.1.5 is affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient input validation in the web framework code. An unauthenticated, remote attacker could exploit these flaws by enticing a user to a malicious link or intercepting requests, ena...

CVE-2016-1309: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843...

PT-2016-1264

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.5.1.5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. This is due to the lack of protection measures for...

Cisco WebEx Meetings Server Multiple Cross-Site Scripting Vulnerabilities

A vulnerability in the web framework code of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some...

Cisco WebEx Meetings for Android Access Bypass Vulnerability

Cisco WebEx Meetings for Android are a set of web-based online meeting applications for the WebEx Meetings solution from Cisco USA based on the Android platform. A security vulnerability exists in Cisco WebEx Meetings for Android versions prior to 8.5.1, which can be exploited by an attacker to...

CVE-2015-6384

The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442...

CVE-2015-6384

The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442...

CVE-2015-6384

CVE-2015-6384 (Cisco WebEx Meetings for Android) affects WebEx Meetings for Android before version 8.5.1. The root cause is improper initialization of custom application permissions, which allows an attacker to bypass intended access restrictions via a crafted application. The vulnerability can b...

PT-2015-7214

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings versions prior to 8.5.1 DataTables plugin versions 1.10.8 and earlier Description The issue allows attackers to bypass intended access restrictions or inject arbitrary web script or HTML. For the DataTables plugin, this ca...

CVE-2015-6384: Undefined Security Weakness

The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442...

try.webex.com XSS vulnerability

Vulnerable URL: http://try.webex.com/meet/aimm1/aimproinvite.asp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.01.2017 Latest check for patch:| 24.01.2017 09:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Cisco WebEx for Android Security Patch

Cisco has been busy the last two days pushing out a patch and security advisories for a number of its products, including a fix for a remotely exploitable vulnerability in its WebEx Meetings mobile application for Android. Cisco said the vulnerability affects versions prior to 8.5.1 of the app, a...