2985 matches found
CVE-2013-1245
The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID...
CVE-2013-1244
Cross-site scripting XSS vulnerability in the portal module in Cisco WebEx Social allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL in the link field in a post, aka Bug ID CSCue67199...
Cross site scripting
Cross-site scripting XSS vulnerability in the portal module in Cisco WebEx Social allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL in the link field in a post, aka Bug ID CSCue67199...
Input validation
The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID...
CVE-2013-1245
The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID...
CVE-2013-1244
The CVE-2013-1244 entry describes an XSS vulnerability in the Cisco WebEx Social portal module. A remote, authenticated user can inject arbitrary web script or HTML via a javascript: URL entered in the link field of a post. The affected component is the portal module of Cisco WebEx Social; the im...
CVE-2013-1245
Cisco WebEx Social’s user-management page is vulnerable to a client-side validation bypass that, due to insufficient server-side validation, lets an authenticated remote attacker inject arbitrary values into Screen Name, Email Address, First/Middle/Last Name, and Job Title fields. Impact: bypass ...
CVE-2013-1244
Cross-site scripting XSS vulnerability in the portal module in Cisco WebEx Social allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL in the link field in a post, aka Bug ID CSCue67199...
Cisco WebEx Social Client-Side Restriction Bypass Attribute Change Vulnerability
A vulnerability in the user management page of WebEx Social could allow an authenticated, remote attacker to inject arbitrary values into the Screen Name, Email Address, First Name, Middle Name, Last Name, and Job Title fields. The vulnerability is due to insufficient server-side validation of...
CVE-2013-1232
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...
Design/Logic Flaw
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...
CVE-2013-1232
The CVE-2013-1232 vulnerability affects Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series. The issue arises in the HTTP implementation, where unauthenticated remote attackers can trigger reading of uninitialized memory by sending crafted HTTP requests. Impact is ...
CVE-2013-1232
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...
CVE-2013-1231
The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629...
Default configuration
The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629...
CVE-2013-1231
The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629...
CVE-2013-1231
The CVE-2013-1231 issue affects Cisco WebEx Node for MCS and WebEx Meetings Server where the HTTP implementation allows remote attackers to read cache files via a crafted request. The root cause is insufficient input validation that enables reading cache directory files. Cisco’s Cisco Security Ad...
Multiple Cisco WebEx Products Cache Directory Read Vulnerability
A vulnerability in multiple Cisco WebEx products could allow an unauthenticated, remote attacker to read files from the cache directory. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by passing a crafted HTTP request to a WebEx node and re...