CVE-2017-3799

CVE-2017-3799 concerns a URL-parameter open-redirect vulnerability in Cisco WebEx (WebEx Meeting Center). The Cisco advisory attributes the issue to insufficient input validation, where an attacker could craft a link containing a remote site URL in the affected parameter to redirect users to a ma...

CVE-2017-3799

A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection. More Information: CSCzu78401. Known Affected Releases: T28.1...

CVE-2017-3795: Improper Authentication

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. More Information: CSCuz03345. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12...

WebEx browser extension command execution

Added: 01/26/2017 CVE: CVE-2017-3823 BID: 95737 Background Cisco WebEx is an online meeting solution. Extensions are available for all major web browsers, which enable users to join meetings from their browser. Problem A vulnerability in the WebEx browser extensions allows command execution when ...

Cisco WebEx Meetings Server and Center Remote Code Execution (CVE-2017-3823)

A remote code execution vulnerability exists in Cisco WebEx Meetings Server and WebEx Meetings Center browser extensions. The vulnerability is due to a design weakness in the API response parser within the extensions.A remote unauthenticated attacker could exploit this vulnerability by enticing a...

PT-2017-16104

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center version T28.1 Description A vulnerability in a URL parameter could allow an unauthenticated, remote attacker to perform site redirection. Recommendations For Cisco WebEx Meeting Center version T28.1, update to a...

WebEx browser extension command execution

Added: 01/26/2017 CVE: CVE-2017-3823 BID: 95737 Background Cisco WebEx is an online meeting solution. Extensions are available for all major web browsers, which enable users to join meetings from their browser. Problem A vulnerability in the WebEx browser extensions allows command execution when ...

PT-2017-16099

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against an administrative user...

PT-2017-16100

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. Recommendations For...

PT-2017-16102

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.7 Description A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco WebEx administration server. Recommendation...

PT-2017-16101

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. Recommendations For Cisco WebEx Meetings...

CVE-2017-3796: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. More Information: CSCuz03353. Known Affected Releases: 2.6...

CVE-2017-3799: URL Redirection to Untrusted Site

A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection. More Information: CSCzu78401. Known Affected Releases: T28.1...

CVE-2017-3797: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco WebEx administration server. More Information: CSCvb60655. Known Affected Releases: 2.7...

CVE-2017-3794: Cross-Site Request Forgery (CSRF)

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against an administrative user. More Information: CSCuz03317. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12...

WebEx browser extension command execution

Added: 01/26/2017 CVE: CVE-2017-3823 BID: 95737 Background Cisco WebEx is an online meeting solution. Extensions are available for all major web browsers, which enable users to join meetings from their browser. Problem A vulnerability in the WebEx browser extensions allows command execution when ...

try.webex.com XSS vulnerability

Vulnerable URL: http://try.webex.com/meet/sem/gbanner.asp?VC=21%22--%3E%3C/script%3E%3Csvg/onload=%27;alert/openbugbounty/;%27%3E=10131741%22--%3E%3C/script%3E%3Csvg/onload=%27;alert/openbugbounty/;%27%3E==ca-pub-9207260018349015=2=teche1013174 Details: Description| Value ---|--- Patched:| Yes, a...

webex.co.in XSS vulnerability

Vulnerable URL: https://www.webex.co.in/javascript/cookieCode.php?jsref=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 212714 VIP website status:| No Check webex.co.i...

Cisco WebEx Meetings Server Remote Code Execution Vulnerability

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A remote command execution vulnerability exists in Cisco WebEx Meetings Server that stems from a failure to properl...

Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability (CNVD-2017-00872)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A cross-site request forgery vulnerability exists in Cisco WebEx Meetings Server, which can be exploited by an...