Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by convincing a user of the affected system t...

Cisco WebEx Meetings Server Authenticated User Arbitrary Code Execution Vulnerability

Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. Cisco WebEx Meetings Server has an unspecified security vulnerability that allows authenticated users to submit special data in command parameters to execute arbitrary code on the target system...

CVE-2015-4276

Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138...

Code injection

Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138...

CVE-2015-4276

Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138...

CVE-2015-4276

CVE-2015-4276 affects Cisco WebEx Meetings Server 2.5MR1. The vulnerability arises from insufficient sanitization of user-supplied input, allowing an authenticated, remote attacker to craft a command parameter to execute arbitrary code on the target system. Impact per sources: remote code executi...

Multiple cross-site scripting vulnerabilities in Cisco WebEx Meeting Center (CNVD-2015-04700)

Cisco WebEx Meeting Center is a web-based online meeting product within a suite of WebEx meeting solutions. A cross-site scripting vulnerability in Cisco WebEx Meeting Center allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

PT-2015-6495

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.5MR1 Description The issue allows remote authenticated users to execute arbitrary code via a crafted command parameter. Recommendations For Cisco WebEx Meetings Server version 2.5MR1, update to a version...

CVE-2015-4276: Improper Input Validation

Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138...

Cisco WebEx Meetings Server Remote Code Execution Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient sanitization of user-supplied input. An attacker could exploit this vulnerability by sending crafted data in a...

Cisco WebEx Meeting Center Information Disclosure Vulnerability (CNVD-2015-04037)

Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. Cisco WebEx Meetings Server fails to properly handle GET parameters, allowing remote attackers to exploit the vulnerability by submitting special requests to obtain sensitive information...

Cisco WebEx Meeting Center GET Parameter Information Disclosure Vulnerability

Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. Cisco WebEx Meetings Server fails to properly handle GET parameters, allowing remote attackers to exploit the vulnerability by submitting special requests to obtain sensitive information...

Cisco WebEx Meeting Center Information Disclosure Vulnerability (CNVD-2015-04101)

Cisco WebEx Meeting Center is a set of WebEx meeting solutions in the United States Cisco Cisco company's WebEx online meeting products. An information disclosure vulnerability exists in Cisco WebEx Meeting Center. Because the program fails to properly determine the authentication used to read th...

CVE-2015-4212

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466...

CVE-2015-4208

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398...

Sql injection

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398...

Design/Logic Flaw

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466...

CVE-2015-4208

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398...

CVE-2015-4212

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466...

CVE-2015-4208

The connected documents provide concrete details for CVE-2015-4208 affecting Cisco WebEx Meeting Center . The vulnerability arises from inadequate restriction of the content of URLs in GET requests , allowing remote, unauthenticated attackers to either obtain sensitive information or perform SQL ...