Webex Meetings Server@- Security Vulnerabilities and Issues — Webex Meetings Server@- CVE List

Lucene search

CiscoWebex Meetings Server-

6 matches found

CVE•added 2015/01/10 2:59 a.m.•41 views

CVE-2014-8035

The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247.

5CVSS6.8AI score0.0026EPSS

CVE•added 2015/01/09 2:59 a.m.•39 views

CVE-2014-8031

Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456.

6.8CVSS7.4AI score0.00174EPSS

CVE•added 2015/01/09 2:59 a.m.•37 views

CVE-2014-8030

Cross-site scripting (XSS) vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inject arbitrary web script or HTML via the email parameter, aka Bug ID CSCuj40381.

4.3CVSS5.9AI score0.00329EPSS

CVE•added 2015/01/09 2:59 a.m.•37 views

CVE-2014-8032

The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information via unspecified vectors, aka Bug IDs CSCuj40453 and CSCuj40449.

4CVSS6AI score0.00207EPSS

CVE•added 2015/01/09 2:59 a.m.•36 views

CVE-2014-8033

The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain administrator access via crafted API requests, aka Bug ID CSCuj40421.

5CVSS6.8AI score0.00303EPSS

CVE•added 2015/01/10 2:59 a.m.•34 views

CVE-2014-8036

The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invite list via a crafted URL, aka Bug ID CSCuj40254.

5CVSS6.7AI score0.00285EPSS