CVE-2015-4209: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913...

CVE-2015-4210: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806...

CVE-2015-4207: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147...

PT-2015-6460

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations At the moment, there is no information...

PT-2015-6459

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description The issue allows remote attackers to obtain sensitive information by exploiting improper authorization for reading a host calendar. This can be done by obtaining a list of...

PT-2015-6457

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description The issue allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page. This occurs because...

Cisco WebEx Meetings Meeting Access Number Vulnerability

A vulnerability in Cisco WebEx Meetings could allow an unauthenticated, remote attacker to discover the meeting access number. The vulnerability is due to the inclusion of sensitive information in URLs. An attacker could exploit this vulnerability by accessing the web page containing meeting...

Cisco WebEx Meetings Host Calendar Download Vulnerability

A vulnerability in Cisco WebEx Meetings could allow an unauthenticated, remote attacker to access and download calendar files without authorization. The vulnerability is due to inconsistent authorization checks. An attacker could exploit this vulnerability by enumerating scheduled meetings and...

Cisco WebEx Meetings Reflected Cross-Site Scripting Vulnerability

A vulnerability in Cisco WebEx Meetings could allow an unauthenticated, remote attacker to perform reflected cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability by...

CVE-2015-4194

The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive informati...

Code injection

The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive informati...

CVE-2015-4194

Cisco WebEx Meeting Center’s web-based admin interface is vulnerable to user enumeration via inconsistent login error messages. An unauthenticated, remote attacker can determine whether a username exists and whether it has administrative privileges, per Cisco advisory Cisco-SA-20150618-CVE-2015-4...

PT-2015-6451

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description The issue concerns the web-based administrative interface, which provides different error messages for failed login attempts. This allows remote attackers to enumerate...

CVE-2015-4194: Exposure of Sensitive Information to an Unauthorized Actor

The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive informati...

Cisco WebEx Meeting Center Web-Based Administrative Interface User Enumeration Vulnerability

A vulnerability in the web-based administrative interface of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to enumerate valid usernames and determine if the usernames have administrative privileges. The vulnerability is due to a logic error in the handling of invalid...

Multiple Cross-Site Scripting Vulnerabilities in Cisco WebEx Meetings Server

Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. Cisco WebEx Meetings Server has multiple cross-site scripting vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or...

CVE-2015-0634

Cross-site scripting XSS vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310...

Cross site scripting

Cross-site scripting XSS vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310...

CVE-2015-0634

Cross-site scripting XSS vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310...

CVE-2015-0634

Cisco WebEx Meetings Server vulnerable to a cross‑site scripting (XSS) in the administrative interface for versions 2.5 and 2.5.0.997. The issue enables remote attackers to inject arbitrary script/HTML via a crafted URL (Bug ID CSCuq86310). Impact is authenticated user impact within the browser c...