CVE-2019-15987
Published Nov 26, 2019A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenti…
Vendor/product archive
cisco / webex_meeting_center CVEs
Beta · best-effort31 CVEs tagged to cisco / webex_meeting_center — 0 Critical, 5 High, 25 Medium, 1 Low, 0 Unrated.
CVE-2017-12366
Published Nov 30, 2017A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system.…
CVE-2017-12365
Published Nov 30, 2017A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the pr…
CVE-2017-12360
Published Nov 30, 2017A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of service (DoS) condition. An attacker co…
CVE-2017-12359
Published Nov 30, 2017A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker to execute arbitrary code on a system. A…
CVE-2017-12297
Published Nov 30, 2017A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The…
CVE-2017-12298
Published Oct 19, 2017A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system.…
CVE-2017-12286
Published Oct 19, 2017A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead…
CVE-2017-6753
Published Jul 25, 2017A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileg…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2017-3823
Published Feb 1, 2017An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class…
- evidence mentions
- 4
- Buzz score
- 22.6
CVE-2017-3799
Published Jan 26, 2017A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection. More Information: CSCzu78401. Known A…
CVE-2016-1410
Published May 28, 2016Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by (1) attending or (2) hosting a meeting, aka Bug…
CVE-2015-6360
Published Apr 21, 2016The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-4212
Published Jun 24, 2015Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466.
CVE-2015-4208
Published Jun 24, 2015Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection a…
CVE-2015-4210
Published Jun 23, 2015Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806.
CVE-2015-4209
Published Jun 23, 2015Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list…
CVE-2015-4207
Published Jun 23, 2015Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by…
CVE-2015-4194
Published Jun 19, 2015The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corres…
CVE-2015-0590
Published Jan 17, 2015Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing crafted parameters during a…
CVE-2015-0583
Published Jan 14, 2015Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug…
CVE-2014-3311
Published Jul 10, 2014Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrar…
CVE-2014-3310
Published Jul 10, 2014The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows…
CVE-2014-2199
Published May 20, 2014meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suit…
CVE-2014-0708
Published Mar 21, 2014WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading (…
Showing 1-25 of 31 CVEsPage 1 of 2