Castor XML Disclosure

The vulnerability of the Castor XML software component for Cisco WebEx Meetings Server relates to errors in restricting XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Cisco WebEx Meetings Server XML Injection

I. VULNERABILITY ------------------------- Cisco WebEx Meetings Server XML External Entity II. CVE REFERENCE ------------------------- CVE-2018-18895 III. VENDOR ------------------------- http://cisco.com IV. TIMELINE ------------------------ 18/09/2018 Vulnerability discovered 19/09/2018 Vendor...

PT-2018-1978

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description The issue is related to errors in restricting XML external entity references in the Castor XML component of the Cisco WebEx Meetings Server software. This could allow a...