CVE-2013-6961

Cross-site scripting XSS vulnerability in the Collaboration Partner Access Console CPAC in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36237...

CVE-2013-6962

Cross-site scripting XSS vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36228...

CVE-2013-6963

Cross-site scripting XSS vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36207...

CVE-2013-6965

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183...

CVE-2013-6967

Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020...

CVE-2013-6968

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003...

CVE-2013-6969

The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990...

CVE-2013-6970

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug ID CSCul35928...

CVE-2013-6971

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140...

CVE-2013-6972

Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126...

CVE-2013-6973

Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121...

CVE-2013-6709

Cisco WebEx Training Center’s registration page vulnerability (CVE-2013-6709) exposes the training-session URL before payment, enabling unauthenticated remote attackers to obtain the session password and access code and join the audio conference. Root cause: disclosure of session access data prio...

CVE-2013-6710

CVE-2013-6710 describes a CSRF vulnerability in Cisco WebEx Training Center that could allow remote attackers to hijack the authentication of users via unknown vectors. The issue is attributed to insufficient CSRF protections in the WebEx Training Center web framework, enabling an attacker to con...

CVE-2013-6711

CVE-2013-6711 is a reflected cross-site scripting (XSS) vulnerability affecting the Cisco WebEx Sales Center product-creation admin page. The issue arises from insufficient input validation on the page used to create new products, allowing remote attackers to craft a URL that injects arbitrary we...

CVE-2013-6959

Cisco WebEx Sales Center contains an open redirect vulnerability (CVE-2013-6959). An unauthenticated, remote attacker could craft a URL that redirects users to an attacker-specified site, enabling phishing. The issue stems from an open redirect flaw in WebEx Sales Center, and Cisco’s advisory not...

CVE-2013-6960

Cisco WebEx Meeting Center contains multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary scripts via crafted URLs. The underlying cause, per the Cisco advisory, is insufficient validation of user-supplied input. Exploitation details in the provided d...

CVE-2013-6961

CVE-2013-6961 concerns the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center. The advisory and related sources describe an unauthenticated, remote cross-site scripting (XSS) vulnerability caused by insufficient validation of user-supplied input. An attacker could lure a us...

CVE-2013-6962

The CVE-2013-6962 issue affects Cisco WebEx Meeting Center, specifically the mobile-browser subsystem, where an unauthenticated, remote attacker can trigger a cross-site scripting (XSS) attack by convincing a user to open a crafted URL. The vulnerability leverages insufficient validation of user-...

CVE-2013-6963

Cisco WebEx Training Center contains a cross-site scripting (XSS) vulnerability in the registration page (CVE-2013-6963). The issue stems from insufficient validation of user-supplied input, enabling an unauthenticated remote attacker to craft a malicious URL that, when a user follows it, may inj...

CVE-2013-6964

Cisco WebEx Business Suite Site Access Control Bypass (CVE-2013-6964) permits an authenticated, remote attacker to inject content from their own WebEx site into another WebEx site due to insufficient validation of user input. Exploitation requires a crafted URL and authenticated access; impact is...