CVE-2014-8032

The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information via unspecified vectors, aka Bug IDs CSCuj40453 and CSCuj40449...

CVE-2014-8031

CVE-2014-8031 affects Cisco WebEx Meetings Server and is linked to a CSRF in the web framework due to insufficient CSRF protections. An unauthenticated, remote attacker could trick an authenticated user into following a malicious link to perform the action on behalf of that user, effectively hija...

CVE-2014-8032

CVE-2014-8032 concerns Cisco WebEx Meetings Server where the OutlookAction LI may disclose a user’s encrypted password to an authenticated remote attacker. The Cisco advisory states the issue arises from the server returning encrypted password values and that authenticated access (potentially on ...

CVE-2014-8033

The CVE-2014-8033 issue affects Cisco WebEx Meetings Server, specifically the play/modules component. It enables an unauthenticated, remote attacker to gain administrator privileges by sending crafted API requests to a vulnerable device, due to an exposed API. Impact described as administrator ac...

CVE-2014-8033

The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain administrator access via crafted API requests, aka Bug ID CSCuj40421...

CVE-2014-8030

Cisco WebEx Meetings Server contains a Cross-Site Scripting (XSS) vulnerability in the sendPwMail.do page that allows an unauthenticated, remote attacker to inject arbitrary script/HTML via the email parameter. Root cause is improper sanitization of the email parameter. The CVE is CVE-2014-8030. ...

PT-2015-3992

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the email parameter in the sendPwMail.do endpoint...

PT-2015-3993

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations At the moment, there is no information abo...

PT-2015-3995

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description The issue allows remote attackers to obtain administrator access via crafted API requests to the play/modules component. Recommendations At the moment, there is no...

CVE-2014-8030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inject arbitrary web script or HTML via the email parameter, aka Bug ID CSCuj40381...

CVE-2014-8032: Exposure of Sensitive Information to an Unauthorized Actor

The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information via unspecified vectors, aka Bug IDs CSCuj40453 and CSCuj40449...

CVE-2014-8033: Improper Authentication

The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain administrator access via crafted API requests, aka Bug ID CSCuj40421...

CVE-2014-8031: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456...

PT-2015-3994

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description The issue in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information. This is related to the OutlookAction LI...

CVE-2014-3400

Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344...

Code injection

Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344...

CVE-2014-3400

Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344...

CVE-2014-3400

CVE-2014-3400 affects Cisco WebEx Meetings Server. Remote authenticated users can obtain sensitive information by reading logs. The description ties the issue to Bug IDs CSCuq36417 and CSCuq40344. No specific root cause, affected versions, exploit details, or remediation are provided in the conne...

PT-2014-5290

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information by reading logs. Recommendations At the moment, there is no information about a newer version...

CVE-2014-3400: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344...