Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoUnified Meetingplace

10 matches found

CVE
CVE•added 2015/05/30 2:59 p.m.•43 views

CVE-2015-0758

The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCus97452.

4CVSS6.9AI score0.00246EPSS
CVE
CVE•added 2015/04/22 1:59 a.m.•41 views

CVE-2015-0705

Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494.

6.8CVSS9.6AI score0.0041EPSS
CVE
CVE•added 2015/04/21 2:59 a.m.•39 views

CVE-2015-0703

Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus95857.

4.3CVSS5.9AI score0.00263EPSS
CVE
CVE•added 2015/04/22 1:59 a.m.•39 views

CVE-2015-0704

Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884.

6.8CVSS7.5AI score0.00107EPSS
CVE
CVE•added 2015/06/04 10:59 a.m.•39 views

CVE-2015-0762

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu51400.

4.3CVSS5.8AI score0.00232EPSS
CVE
CVE•added 2015/06/04 10:59 a.m.•39 views

CVE-2015-0763

Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL, aka Bug ID CSCuu60338.

5CVSS6.3AI score0.00241EPSS
CVE
CVE•added 2015/06/24 10:59 a.m.•39 views

CVE-2015-4214

Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID CSCuu33050.

4CVSS6.3AI score0.00292EPSS
CVE
CVE•added 2015/07/02 10:59 a.m.•39 views

CVE-2015-4233

SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037.

6.5CVSS8.2AI score0.00495EPSS
CVE
CVE•added 2015/04/21 2:59 a.m.•36 views

CVE-2015-0702

Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712.

9CVSS7.6AI score0.00936EPSS
CVE
CVE•added 2015/06/04 10:59 a.m.•35 views

CVE-2015-0764

Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted resource request, aka Bug ID CSCus95603.

5CVSS6.8AI score0.00241EPSS