Lucene search

K

7 matches found

CVE
CVE
added 2018/05/02 10:29 p.m.70 views

CVE-2018-0262

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to components of, or sensitive information in, an affected system, leading to Remote Code Execution. The vulnerability is due to incorrect default configuration of the device, which c...

8.1CVSS8.4AI score0.05174EPSS
CVE
CVE
added 2018/06/07 12:29 p.m.47 views

CVE-2018-0263

A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an affected system. The vulnerability is due to incorrect default configuration of the device, which can expose internal interfaces and ports o...

7.4CVSS7.5AI score0.00247EPSS
CVE
CVE
added 2018/05/17 3:29 a.m.45 views

CVE-2018-0280

A vulnerability in the Real-Time Transport Protocol (RTP) bitstream processing of the Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient input validation of incoming RTP bitstreams. An attacker ...

7.5CVSS7.4AI score0.00941EPSS
CVE
CVE
added 2018/06/21 11:29 a.m.44 views

CVE-2018-0371

A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of incoming HTTP requests. An attacker could exploit this vulnerability by sending a cra...

6.8CVSS6.4AI score0.00398EPSS
CVE
CVE
added 2018/11/08 6:29 p.m.44 views

CVE-2018-15446

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper protections on data that is returned from user meeting requests when the Guest access via ID and passcode option is set to Legacy mod...

7.5CVSS6.3AI score0.01216EPSS
CVE
CVE
added 2018/06/21 11:29 a.m.36 views

CVE-2018-0359

A vulnerability in the session identification management functionality of the web-based management interface for Cisco Meeting Server could allow an unauthenticated, local attacker to hijack a valid user session identifier, aka Session Fixation. The vulnerability exists because the affected applica...

5.5CVSS5.3AI score0.00089EPSS
CVE
CVE
added 2018/10/05 2:29 p.m.36 views

CVE-2018-0439

A vulnerability in the web-based management interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the ...

8.8CVSS9AI score0.00457EPSS