CVE-2017-12363

A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the...

CVE-2017-12359

A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format .arf files could allow an attacker to execute arbitrary code on a system. An attacker could exploit this vulnerability by providing a user with a malicious .arf file via email or URL and convinci...

CVE-2017-12368

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12360

A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format WRF files could allow an attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to...

PT-2017-12529

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Server affected versions not specified Description A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The issue is...

Remote Code Execution Vulnerability in Multiple Cisco Products

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the American Cisco Cisco company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A remote...

PT-2017-12526

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A denial of service DoS condition could be caused by an attacker providing a malicious WebEx Recording Format WRF file to a user via email or URL, convincing them...

PT-2017-12535

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A remote attacker could exploit this issue by providing a user with a malicious Advanced Recording Format ARF or WebEx Recording Format WRF file via email or URL...

Denial of Service Vulnerability in Multiple Cisco Products (CNVD-2017-35721)

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the United States Cisco Cisco Company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A...

CVE-2017-12370: Improper Restriction of Operations within the Bounds of a Memory Buffer

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12371: Improper Restriction of Operations within the Bounds of a Memory Buffer

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12368: Improper Restriction of Operations within the Bounds of a Memory Buffer

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12366: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

Remote Code Execution Vulnerability in Multiple Cisco Products (CNVD-2017-35724)

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the United States Cisco Cisco Company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A...

PT-2017-12537

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A remote code execution issue exists in Cisco WebEx Network Recording Player, related to the parsing of Advanced Recording Format ARF and WebEx Recording Format W...

CVE-2017-12297: Improper Input Validation

A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An...

PT-2017-12536

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A remote code execution issue exists in the Cisco WebEx Network Recording Player, affecting the handling of Advanced Recording Format ARF and WebEx Recording Form...

PT-2017-12531

Name of the Vulnerable Software and Affected Versions Cisco WebEx Event Center affected versions not specified Description A design flaw in the product allows an authenticated, remote attacker to view unlisted meeting information by executing a query on an Event Center site. This query can displa...

CVE-2017-12365: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would...

CVE-2017-12372: Improper Restriction of Operations within the Bounds of a Memory Buffer

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...