CVE-2014-8034

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321...

CVE-2014-8034

Cisco WebEx Meetings Server 1.5 is affected by CVE-2014-8034 due to a login CAPTCHA that does not refresh between attempts, enabling unauthenticated remote attackers to perform brute-force username guessing and enumerate valid accounts. Cisco’s advisory confirms the vulnerability and that updated...

PT-2015-3996

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 1.5 Description The issue allows remote attackers to gain access via a brute-force approach by guessing usernames, as the same CAPTCHA challenge is presented for each login attempt. Recommendations For Cisco...

CVE-2014-8034: Undefined Security Weakness

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321...

CVE-2015-0583

Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281...

Information disclosure

Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281...

CVE-2015-0583

Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281...

CVE-2015-0583

CVE-2015-0583 affects Cisco WebEx Meetings Server/Meeting Center. A vulnerability in the file: URI handling could cause information disclosure by unauthenticated remote attackers who view application URL requests containing sensitive data. Impact is sensitive information exposure via URLs; adviso...

Cisco WebEx Meetings Server User Enumeration Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to guess valid user accounts on the targeted system. The vulnerability exists because the affected software fails to refresh the CAPTCHA on the login page. An attacker could exploit this vulnerability b...

PT-2015-4729

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description The issue is related to the improper restriction of URL content, allowing remote attackers to obtain sensitive information through vectors related to file: URIs...

CVE-2015-0583: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281...

Cisco WebEx Meetings Server Information Disclosure Vulnerability (CNVD-2015-00277)

Cisco WebEx Meetings are web conferencing solutions. An information disclosure vulnerability exists in Cisco WebEx Meetings Server, which can be exploited by an attacker to obtain sensitive information...

Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability

Cisco WebEx Meetings are web conferencing solutions. A cross-site scripting vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inject arbitrary web script or HTML via email parameters...

Cisco WebEx Meetings Server Encryption Password Disclosure Vulnerability

Cisco WebEx Meetings are web conferencing solutions. An encrypted password information disclosure vulnerability exists in OutlookAction LI in Cisco WebEx Meetings Server, which allows remote authenticated users to obtain sensitive encrypted password information via unspecified vectors...

Cisco WebEx Meetings Server Authentication Bypass Vulnerability

Cisco WebEx Meetings are web conferencing solutions. An authentication bypass vulnerability in the play/modules component in Cisco WebEx Meetings Server allows remote attackers to gain administrator privileges via a crafted API request...

Unspecified Vulnerability in Cisco WebEx Meetings Server

Cisco WebEx Meetings are web conferencing solutions. The outlookpa component in Cisco WebEx Meetings Server fails to properly validate API inputs, allowing a remote attacker with a carefully constructed URL to be able to modify the invitation list for a meeting...

Cisco WebEx Meetings Server User Enumeration Vulnerability (CNVD-2015-00224)

Cisco WebEx Meetings are web conferencing solutions. The web framework in Cisco WebEx Meetings Server generates different return messages based on the presence or absence of a URL request for a username, allowing a remote attacker to enumerate user accounts through a series of requests...

Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability (CNVD-2015-00233)

Cisco WebEx Meetings are web conferencing solutions. A cross-site request forgery vulnerability exists in Cisco WebEx Meetings Server, which allows remote attackers to exploit the vulnerability to hijack the authentication of arbitrary users...

Cisco WebEx Meetings Server User Enumeration Vulnerability (CNVD-2015-00225)

Cisco WebEx Meetings are web conferencing solutions. A user enumeration vulnerability exists in Cisco WebEx Meetings Server, which could be exploited by an attacker to obtain valid user accounts via a brute force attack...

CVE-2014-8035

The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247...