CVE-2013-6973

Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121...

CVE-2013-6969

The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990...

CVE-2013-6961

Cross-site scripting XSS vulnerability in the Collaboration Partner Access Console CPAC in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36237...

CVE-2013-6960

Cisco WebEx Meeting Center contains multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary scripts via crafted URLs. The underlying cause, per the Cisco advisory, is insufficient validation of user-supplied input. Exploitation details in the provided d...

CVE-2013-6970

Cisco WebEx Meeting Center is affected by CVE-2013-6970, where remote attackers can obtain sensitive information by reading verbose error messages in server responses (Bug ID CSCul35928). The entry notes a medium severity (CVSS v2 base score 5.0) with network access and no authentication required...

CVE-2013-6959

Cisco WebEx Sales Center contains an open redirect vulnerability (CVE-2013-6959). An unauthenticated, remote attacker could craft a URL that redirects users to an attacker-specified site, enabling phishing. The issue stems from an open redirect flaw in WebEx Sales Center, and Cisco’s advisory not...

CVE-2013-6968

Cisco WebEx Training Center is affected by CVE-2013-6968, a vulnerability in the training registration page where error messages differ depending on whether an email exists, enabling remote attackers to enumerate registered attendees via multiple registration requests (Bug CSCul36003). Affected p...

CVE-2013-6962

Cross-site scripting XSS vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36228...

CVE-2013-6961: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Collaboration Partner Access Console CPAC in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36237...

CVE-2013-6709: Exposure of Sensitive Information to an Unauthorized Actor

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111...

CVE-2013-6963: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36207...

CVE-2013-6972: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126...

CVE-2013-6971: Improper Input Validation

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140...

CVE-2013-6967: Improper Input Validation

Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020...

CVE-2013-6711: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540...

CVE-2013-6965: Undefined Security Weakness

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183...

CVE-2013-6968: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003...

CVE-2013-6710: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCul25567...

CVE-2013-6973: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121...

CVE-2013-6969: Improper Input Validation

The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990...