Cisco Webex Meetings Desktop App Unauthorized Access

The vulnerability of the Cisco Webex Meetings Desktop App and Webex Productivity Tools software for web conferencing on Windows operating systems is related to errors in handling requests. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by...

CVE-2021-1372: Exposure of Sensitive Information Through Data Queries

A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared memory by the affected software. An...

PT-2021-2166

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App and Webex Productivity Tools affected versions not specified Description The issue is related to errors in processing requests in the Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows,...

Cisco Webex Meetings Desktop App Information Disclosure Vulnerability

The Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco. An information disclosure vulnerability exists in the Cisco Webex Meetings Desktop App and Webex Productivity Tools, which arises from errors such as configuration during...

Cisco Webex Meetings Desktop App Arbitrary Command Execution

The vulnerability of the software update service for Cisco Webex Meetings Desktop App and Webex Productivity Tools exists due to the lack of measures taken to neutralize special commands used in the operating system’s command line. Exploiting this vulnerability allows an attacker to execute...

CVE-2019-1674

A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters...

CVE-2019-1674: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters...

Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Operating System Command Injection Vulnerability

Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools are both products of Cisco, Inc.Cisco Webex Meetings Desktop App is a video conferencing control application for use in a desktop environment. Cisco Webex Productivity Tools is a video conference scheduling tool. An operating...

PT-2019-1518

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App versions prior to 33.6.6 and 33.9.1 Cisco Webex Productivity Tools versions prior to 33.0.7 Description A vulnerability in the update service could allow an authenticated, local attacker to execute arbitrary...

PT-2018-2053

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App for Windows affected versions not specified Cisco Webex Productivity Tools for Windows affected versions not specified Description A vulnerability in the update service could allow an authenticated, local...

CVE-2016-4349

The CVE-2016-4349 entry describes an Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012. The issue allows local privilege escalation by placing one of several DLLs (cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, se...

CVE-2016-4349

Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current...

PT-2016-5896

Name of the Vulnerable Software and Affected Versions Cisco WebEx Productivity Tools version 2.40.5001.10012 Description The issue allows local users to gain privileges via a Trojan horse file, specifically by placing malicious versions of certain DLL files in the current working directory. These...

CVE-2016-4349: Undefined Security Weakness

Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current...