PT-2018-8719

Name of the Vulnerable Software and Affected Versions: Cisco WebEx Connect IM affected versions not specified Description: A cross-site scripting XSS issue exists due to insufficient input validation of parameters passed to the web server. This could allow an unauthenticated, remote attacker to...

CVE-2018-0112: Improper Input Validation

A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient input validation by the Cisco WebEx clients. An...

Cisco WebEx Clients Remote Code Execution Vulnerability

A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient input validation by the Cisco WebEx clients. An...

Cisco WebEx Connect IM Cross-Site Scripting Vulnerability

A vulnerability in Cisco WebEx Connect IM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affect...

PT-2018-1192

Name of the Vulnerable Software and Affected Versions Cisco WebEx Business Suite versions prior to T31.23.2 Cisco WebEx Business Suite versions prior to T32.10 Cisco WebEx Meetings versions prior to T32.10 Cisco WebEx Meetings Server versions prior to 2.8 MR2 Description A vulnerability in Cisco...

The vulnerability of the software for Cisco WebEx Meetings Server, Cisco WebEx Meetings, Cisco WebEx Business Suite, and Cisco WebEx Network Recording Player lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of the software for Cisco WebEx Meetings Server, Cisco WebEx Meetings, Cisco WebEx Business Suite, and Cisco WebEx Network Recording Player is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using...

Vulnerabilities of software for web conferencing solutions such as WebEx Extension, ActiveTouch General Plugin Container, GpcContainer Class ActiveX, WebEx Meeting Center, and Download Manager ActiveX Control. These vulnerabilities arise from operations that go beyond the buffer limits in memory, allowing attackers to execute arbitrary code with elevated privileges.

The vulnerabilities of the software for web conferencing solutions such as WebEx Extension, ActiveTouch General Plugin Container, GPCContainer Class ActiveX, WebEx Meeting Center, and DownloadManager ActiveX Control stem from operations that go beyond the buffer limits in memory. Exploiting these...

Cisco WebEx Meetings Serve Information Disclosure Vulnerability (CNVD-2018-02047)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. An information disclosure vulnerability exists in Cisco WebEx Meetings Server that stems from the program's failure...

Cisco WebEx Meetings Server XML External Entity Information Disclosure Vulnerability

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. Cisco WebEx Meetings Server has an XML external entity information disclosure vulnerability that can be exploited b...

Cisco WebEx Meetings Server Information Disclosure Vulnerability (CNVD-2018-02046)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. An information disclosure vulnerability exists in Cisco WebEx Meetings Server. A remote attacker could exploit this...

CVE-2018-0109

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to obtain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw i...

CVE-2018-0108

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to collect customer files via an out-of-band XML External Entity XXE injection. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The...

CVE-2018-0111

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw i...

CVE-2018-0110

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access the remote support account even after it has been disabled via the web application. The vulnerability is due to a design flaw in Cisco WebEx Meetings Server, which would not disable access to...

CVE-2018-0109

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to obtain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw i...

Xxe

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to collect customer files via an out-of-band XML External Entity XXE injection. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The...

Code injection

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access the remote support account even after it has been disabled via the web application. The vulnerability is due to a design flaw in Cisco WebEx Meetings Server, which would not disable access to...

Spoofing

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw i...

CVE-2018-0111

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw i...

Spoofing

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to obtain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw i...