Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified meetingplace web conferencing - vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2015-4262
The password-change feature in Cisco Unified MeetingPlace Web Conferencing prior to 8.5(5) MR3 and 8.6 prior to 8.6(2) does not check the session ID or require entry of the current password, which allows remote malicious users to reset arbitrary passwords via a crafted HTTP reque...
Cisco Unified Meetingplace Web Conferencing 6.0.417.0Cisco Unified Meetingplace Web Conferencing 6.0 BaseCisco Unified Meetingplace Web Conferencing 8.5\\(3\\)Cisco Unified Meetingplace Web Conferencing 7.0\\(2\\) Sr1Cisco Unified Meetingplace Web Conferencing 7.0\\(2\\)Cisco Unified Meetingplace Web Conferencing 8.5\\(1\\)Cisco Unified Meetingplace Web Conferencing 8.0\\(1\\)Cisco Unified Meetingplace Web Conferencing 8.5\\(2\\) Sr2Cisco Unified Meetingplace Web Conferencing 8.0\\(2\\)Cisco Unified Meetingplace Web Conferencing 8.0\\(1\\) Sr1Cisco Unified Meetingplace Web Conferencing 8.5\\(4\\)Cisco Unified Meetingplace Web Conferencing 7.0\\(1\\)Cisco Unified Meetingplace Web Conferencing 7.1\\(1\\)Cisco Unified Meetingplace Web Conferencing 7.1\\(2\\)Cisco Unified Meetingplace Web Conferencing 7.0\\(3\\)Cisco Unified Meetingplace Web Conferencing 8.5\\(2\\) Sr1Cisco Unified Meetingplace Web Conferencing 8.5\\(2\\)
9
CVSSv2
CVE-2009-0614
Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 prior to 6.0(517.0) (aka 6.0 MR4) and 7.0 prior to 7.0(2) (aka 7.0 MR1) allows remote malicious users to bypass authentication and obtain administrative access via a crafted URL.
Cisco Unified Meetingplace Web Conferencing
4.3
CVSSv2
CVE-2013-3419
Cross-site scripting (XSS) vulnerability in Cisco Unified MeetingPlace Web Conferencing allows remote malicious users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh74981.
Cisco Unified Meetingplace Web Conferencing -
5
CVSSv2
CVE-2013-3438
The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote malicious users to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.
Cisco Unified Meetingplace Web Conferencing -
7.8
CVSSv2
CVE-2012-5416
Buffer overflow in Cisco Unified MeetingPlace Web Conferencing prior to 7.1MR1 Patch 1, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 allows remote malicious users to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua6634...
Cisco Unified Meetingplace 7.1Cisco Unified MeetingplaceCisco Unified Meetingplace 8.0Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0.3Cisco Unified Meetingplace 8.5.3Cisco Unified Meetingplace 8.5.4Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 8.5.1Cisco Unified Meetingplace 8.5.2Cisco Unified Meetingplace 7.0
6.5
CVSSv2
CVE-2012-0337
SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.
Cisco Unified Meetingplace 7.1
9.3
CVSSv2
CVE-2013-1169
Cisco Unified MeetingPlace Web Conferencing Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 2, and 8.5 prior to 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote malicious users to impersonate users via a craf...
Cisco Unified Meetingplace Web Conferencing Server 7.1Cisco Unified Meetingplace Web Conferencing Server 8.0Cisco Unified Meetingplace Web Conferencing Server 8.5
6.8
CVSSv2
CVE-2013-5494
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote malicious users to hijack the authentication of arbitrary users, aka Bug IDs CSCui...
Cisco Unified Meetingplace Web Conferencing -Cisco Unified Meetingplace
7.6
CVSSv2
CVE-2013-1168
The web server in Cisco Unified MeetingPlace Application Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote malicious users to hijack sessions by lev...
Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0Cisco Unified Meetingplace 7.0.3Cisco Unified Meetingplace 7.1Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 8.0Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 8.5.1Cisco Unified Meetingplace 8.5.2Cisco Unified Meetingplace 8.5.3
3.5
CVSSv2
CVE-2009-0743
Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 prior to 6.0(517.0) (aka 6.0 MR4) and 7.0 prior to 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML ...
Cisco Unified Meetingplace 6.0Cisco Unified Meetingplace 7.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook