Cisco WebEx Meetings Server Command Injection Vulnerability

A vulnerability in the administrative web interface of Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary commands on the affected system and on the devices managed by the affected system. The vulnerability is due to improper user input validation. An...

CVE-2015-0597

The Forgot Password feature in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159...

CVE-2015-0596

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163...

CVE-2015-0595

The XMLAPI in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079...

Information disclosure

The XMLAPI in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163...

CVE-2015-0595

The XMLAPI in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079...

CVE-2015-0596

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163...

CVE-2015-0597

The Forgot Password feature in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159...

CVE-2015-0595

CVE-2015-0595 affects Cisco WebEx Meetings Server: the XMLAPI interface allows remote attackers to disclose sensitive information by reading crafted GET return messages. Root cause is improper sanitization of return messages in the XMLAPI (Bug CSCuj67079). Affected are 1.5(.1.131) and earlier rel...

CVE-2015-0596

A CSRF vulnerability (CVE-2015-0596) affects Cisco WebEx Meetings Server 1.5(.1.131) and earlier, allowing remote attackers to hijack user authentication under Bug ID CSCuj67163. Cisco released a security advisory; exploitation details are not fully provided in the initial documents, but multiple...

CVE-2015-0597

Cisco WebEx Meetings Server vulnerability CVE-2015-0597 allows remote attackers to enumerate administrator accounts via crafted packets in the Forgot Password process. Affected are Cisco WebEx Meetings Server 1.5(.1.131) and earlier. The root cause is insufficient input validation, enabling unaut...

PT-2015-4739

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 1.5.1.131 and earlier Description The issue allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests to the XMLAPI. Recommendations For Cisco WebEx Meeting...

PT-2015-4740

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 1.5.1.131 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For Cisco WebEx Meetings Server version...

CVE-2015-0595: Exposure of Sensitive Information to an Unauthorized Actor

The XMLAPI in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079...

CVE-2015-0596: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163...

CVE-2015-0597: Improper Input Validation

The Forgot Password feature in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159...

PT-2015-4741

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 1.5.1.131 and earlier Description The issue concerns the Forgot Password feature, which allows remote attackers to enumerate administrative accounts via crafted packets. Recommendations For Cisco WebEx...

Cisco WebEx Meetings Server User Enumeration Vulnerability (CNVD-2015-00894)

Cisco WebEx Meetings are web conferencing solutions. A security vulnerability exists in Cisco WebEx Meetings Server that allows an attacker to send special messages to enumerate administrator accounts...

Cisco WebEx Meetings Server User Enumeration Vulnerability

A vulnerability in the Forgot Password process of the Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to enumerate a valid administrator account. The vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by submitting...