CVE-2015-4212

Cisco WebEx Meeting Center is affected by CVE-2015-4212, where an unauthenticated, remote attacker can obtain sensitive information, including credentials, due to improper handling of requests in the Cisco WebEx Meeting Center implementation. Multiple sources describe exposure of data and credent...

Cisco WebEx Meeting Center Information Disclosure Vulnerability

Cisco WebEx Meeting Center is a set of WebEx meeting solutions in the United States Cisco Cisco company's network of online meeting products. The product invites others to join the meeting via e-mail or instant messaging IM, and supports online product demonstrations, information sharing, and mor...

Cisco WebEx Meeting Center Cross-Site Scripting Vulnerability

Cisco WebEx Meeting Center is a set of WebEx meeting solutions in the United States Cisco Cisco company's network of online meeting products. The product invites others to join the meeting via e-mail or instant messaging IM, and supports online product demonstrations, information sharing, and mor...

CVE-2015-4208: Improper Neutralization of Special Elements used in an SQL Command

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398...

CVE-2015-4212: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466...

PT-2015-6462

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description The issue allows remote attackers to obtain sensitive information via unspecified vectors, which can include discovering credentials. Recommendations At the moment, there i...

PT-2015-6458

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description The issue allows remote attackers to obtain sensitive information or conduct SQL injection attacks due to improper restriction of URL content in GET requests. This is relat...

Cisco WebEx Meeting Center Data and Credential Exposure Vulnerability

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to access data and credentials. The vulnerability is due to the exposure of sensitive information. An attacker could exploit this vulnerability to access data and credentials. Cisco has confirmed the...

CVE-2015-4210

Cross-site scripting XSS vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806...

CVE-2015-4209

Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913...

CVE-2015-4207

Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147...

Authorization

Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913...

Information disclosure

Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147...

Cisco WebEx Meeting Center GET Parameter Vulnerability

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to view sensitive information that is transmitted in GET parameters or perform SQL injection. The vulnerability is due to the inclusion of sensitive information in the URL as GET parameters. An attacker...

CVE-2015-4210

CVE-2015-4210 is a reflected XSS vulnerability in Cisco WebEx Meetings Center. The issue allows remote attackers to trigger arbitrary script/HTML by sending a specially crafted URL, affecting the WebEx Meetings Center component. Cisco’s advisory states the vulnerability is due to insufficient inp...

CVE-2015-4207

Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147...

CVE-2015-4209

Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913...

CVE-2015-4210

Cross-site scripting XSS vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806...

CVE-2015-4207

Cisco WebEx Meeting Center is affected by CVE-2015-4207, where a meeting access number is exposed in the URL, enabling remote disclosure of sensitive information and bypass of attendance restrictions by visiting the meeting-registration page. The root cause is the inclusion of the access number i...

CVE-2015-4209

Cisco WebEx Meeting Center is affected by an information-disclosure vulnerability (CVE-2015-4209) where remote attackers can read a host calendar without proper authorization. The root cause is inconsistent authorization checks, enabling an attacker to enumerate hosted meetings and subsequently i...