CVE-2016-6444

CVE-2016-6444 affects Cisco Meeting Server. The OpenVAS and CVE records describe an unauthenticated, remote CSRF vulnerability in the Web Bridge interface caused by insufficient CSRF protections. An attacker could lure a user to a malicious link to submit arbitrary requests to the device with the...

CVE-2016-6446

Cisco Meeting Server Web Bridge vulnerability (CVE-2016-6446) allows an unauthenticated remote attacker to disclose memory from a connected server. The issue stems from missing bounds checks in the Web Bridge functionality; a crafted packet can per-packet disclose memory, potentially exposing pri...