Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoWebex Meetings Server

136 matches found

CVE
CVE•added 2014/06/08 4:55 p.m.•39 views

CVE-2014-3286

The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661.

5CVSS6.2AI score0.00348EPSS
CVE
CVE•added 2015/01/09 2:59 a.m.•39 views

CVE-2014-8031

Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456.

6.8CVSS7.4AI score0.00174EPSS
CVE
CVE•added 2015/02/02 1:59 a.m.•39 views

CVE-2015-0595

The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079.

5CVSS6.3AI score0.00607EPSS
CVE
CVE•added 2015/02/02 1:59 a.m.•39 views

CVE-2015-0597

The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159.

5CVSS6.9AI score0.00334EPSS
CVE
CVE•added 2018/10/05 2:29 p.m.•39 views

CVE-2018-15418

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording F...

9.3CVSS7.7AI score0.00227EPSS
CVE
CVE•added 2020/08/17 6:15 p.m.•39 views

CVE-2020-3501

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web s...

4.1CVSS4.5AI score0.00169EPSS
CVE
CVE•added 2014/04/30 10:49 a.m.•38 views

CVE-2014-2186

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777.

6.8CVSS7.4AI score0.00122EPSS
CVE
CVE•added 2014/07/28 5:55 p.m.•38 views

CVE-2014-3304

The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID CSCuj81722.

5CVSS6.8AI score0.00483EPSS
CVE
CVE•added 2014/07/10 11:6 a.m.•38 views

CVE-2014-3310

The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463.

4.3CVSS6.8AI score0.00294EPSS
CVE
CVE•added 2016/07/15 4:59 p.m.•38 views

CVE-2016-1447

Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuy83194.

6.1CVSS6AI score0.00453EPSS
CVE
CVE•added 2016/07/15 4:59 p.m.•38 views

CVE-2016-1449

Cross-site scripting (XSS) vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy92711.

6.1CVSS5.9AI score0.00296EPSS
CVE
CVE•added 2016/08/23 2:10 a.m.•38 views

CVE-2016-1484

Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vectors, aka Bug ID CSCuy92724.

7.5CVSS7.4AI score0.00247EPSS
CVE
CVE•added 2017/01/26 7:59 a.m.•38 views

CVE-2017-3794

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against an administrative user. More Information: CSCuz03317. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12.

8.8CVSS8.7AI score0.00217EPSS
CVE
CVE•added 2017/03/17 10:59 p.m.•38 views

CVE-2017-3811

An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc39165. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.2054.

6.5CVSS6.1AI score0.00325EPSS
CVE
CVE•added 2018/10/05 2:29 p.m.•38 views

CVE-2018-15411

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording F...

9.3CVSS7.7AI score0.00227EPSS
CVE
CVE•added 2018/10/05 2:29 p.m.•38 views

CVE-2018-15412

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording F...

9.3CVSS7.9AI score0.00234EPSS
CVE
CVE•added 2013/10/16 10:52 a.m.•37 views

CVE-2013-5529

The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allows remote attackers to launch a deployment or cause a denial of service (deployment interruption) via a direct request, aka Bug ID CSCuf52200.

6.8CVSS6.9AI score0.00396EPSS
CVE
CVE•added 2014/07/26 11:11 a.m.•37 views

CVE-2014-3301

The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned messages, aka Bug ID CSCuj81700.

5CVSS6.4AI score0.00607EPSS
CVE
CVE•added 2014/10/05 1:55 a.m.•37 views

CVE-2014-3400

Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344.

4CVSS6AI score0.00162EPSS
CVE
CVE•added 2015/01/09 2:59 a.m.•37 views

CVE-2014-8030

Cross-site scripting (XSS) vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inject arbitrary web script or HTML via the email parameter, aka Bug ID CSCuj40381.

4.3CVSS5.9AI score0.00329EPSS
CVE
CVE•added 2015/01/09 2:59 a.m.•37 views

CVE-2014-8032

The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information via unspecified vectors, aka Bug IDs CSCuj40453 and CSCuj40449.

4CVSS6AI score0.00207EPSS
CVE
CVE•added 2018/10/05 2:29 p.m.•37 views

CVE-2018-15416

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording F...

9.3CVSS7.7AI score0.00234EPSS
CVE
CVE•added 2015/01/09 2:59 a.m.•36 views

CVE-2014-8033

The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain administrator access via crafted API requests, aka Bug ID CSCuj40421.

5CVSS6.8AI score0.00303EPSS
CVE
CVE•added 2015/05/15 1:59 a.m.•36 views

CVE-2015-0634

Cross-site scripting (XSS) vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310.

4.3CVSS5.8AI score0.00416EPSS
CVE
CVE•added 2017/05/16 5:29 p.m.•36 views

CVE-2017-6651

A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings. The vulnerability is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions and occurs ...

7.5CVSS7.7AI score0.00438EPSS
CVE
CVE•added 2018/10/05 2:29 p.m.•36 views

CVE-2018-15409

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording F...

7.8CVSS7.7AI score0.00425EPSS
CVE
CVE•added 2019/01/23 11:29 p.m.•36 views

CVE-2019-1641

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording F...

9.3CVSS7.7AI score0.00301EPSS
CVE
CVE•added 2020/08/17 6:15 p.m.•36 views

CVE-2020-3502

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web s...

4.1CVSS4.5AI score0.00169EPSS
CVE
CVE•added 2014/01/16 7:55 p.m.•35 views

CVE-2013-6687

The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by reading HTML source code, aka Bug ID CSCul33876.

4CVSS6.5AI score0.00162EPSS
CVE
CVE•added 2014/07/26 11:11 a.m.•35 views

CVE-2014-3305

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuj81735.

6.8CVSS7.4AI score0.0019EPSS
CVE
CVE•added 2014/07/10 11:6 a.m.•35 views

CVE-2014-3311

Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467.

5.1CVSS8.4AI score0.03061EPSS
CVE
CVE•added 2018/10/05 2:29 p.m.•35 views

CVE-2018-15417

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording F...

9.3CVSS7.7AI score0.00234EPSS
CVE
CVE•added 2018/10/05 2:29 p.m.•35 views

CVE-2018-15419

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording F...

9.3CVSS7.7AI score0.00227EPSS
CVE
CVE•added 2015/01/10 2:59 a.m.•34 views

CVE-2014-8036

The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invite list via a crafted URL, aka Bug ID CSCuj40254.

5CVSS6.7AI score0.00285EPSS
CVE
CVE•added 2018/10/05 2:29 p.m.•34 views

CVE-2018-15420

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording F...

9.3CVSS7.7AI score0.00234EPSS
CVE
CVE•added 2019/01/23 11:29 p.m.•34 views

CVE-2019-1639

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording F...

9.3CVSS7.7AI score0.00301EPSS
Total number of security vulnerabilities136