Design/Logic Flaw

The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661...

CVE-2014-3286

The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661...

CVE-2014-3286

CVE-2014-3286 affects Cisco WebEx Meetings Server. The vulnerability resides in the web framework’s handling of reply messages, where improper sanitization allows an unauthenticated, remote attacker to enumerate valid user accounts by sending crafted URLs. Cisco's advisory confirms the issue and ...

PT-2014-5182

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Server affected versions not specified Description The issue concerns the web framework in Cisco WebEx Meeting Server, which fails to properly restrict the content of reply messages. This allows remote attackers to obtain...

CVE-2014-3286: Undefined Security Weakness

The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661...

CVE-2014-2199

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...

Design/Logic Flaw

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...

CVE-2014-2199

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...

CVE-2014-2199

CVE-2014-2199 affects Cisco WebEx components (Event Center, Meeting Center, Sales Center, Training Center, WebEx Meetings Server 1.5(.1.131) and earlier) and WebEx Business Suite; vulnerable are versions before 27.32.31.16 (27.x), before 28.12.13.18 (28.x), and before 29.5.1.12 (29.x). The vulner...

CVE-2014-2199: Exposure of Sensitive Information to an Unauthorized Actor

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...

PT-2014-4553

Name of the Vulnerable Software and Affected Versions Cisco WebEx Event Center versions 1.5.1.131 and earlier Cisco WebEx Meeting Center versions 1.5.1.131 and earlier Cisco WebEx Sales Center versions 1.5.1.131 and earlier Cisco WebEx Training Center versions 1.5.1.131 and earlier Cisco WebEx...

Cisco WebEx ARF Player Multiple Vulnerabilities (cisco-sa-20140507-webex)

The version of Cisco WebEx ARF Player installed on the remote host has multiple buffer overflow and memory corruption vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a malicious ARF file, resulting in denial of service or arbitrary code execution. C...

Cisco WebEx WRF Player Multiple Vulnerabilities (cisco-sa-20140507-webex)

The version of Cisco WebEx WRF Player installed on the remote host has multiple buffer overflow and memory corruption vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a malicious WRF file, resulting in denial of service or arbitrary code execution. C...

Cisco WebEx multiple security vulnerabilities

Memory corruption on different formats parsing...

Cisco Fixes Remote Code Execution Flaws in Several WebEx Products

Cisco has patched a handful of buffer overflows in several of its WebEx products that could allow an attacker to execute arbitrary code or crash a vulnerable application. The bugs affect the WebEx WRF and ARF players and some of Cisco’s Business Suite builds, WebEx 11 and WebEx Meetings Server al...

CVE-2014-2132

Cisco WebEx Recording Format WRF player and Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service application crash via a crafted 1 .wrf or 2 .arf file that triggers a buffer over-read, aka Bug ID...

CVE-2014-2134

Heap-based buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted audio channel in a .wrf file,...

Heap overflow

Heap-based buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted audio channel in a .wrf file,...

Design/Logic Flaw

Cisco WebEx Recording Format WRF player and Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service application crash via a crafted 1 .wrf or 2 .arf file that triggers a buffer over-read, aka Bug ID...

CVE-2014-2132

Cisco WebEx Recording Format WRF player and Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service application crash via a crafted 1 .wrf or 2 .arf file that triggers a buffer over-read, aka Bug ID...