cisco unified meetingplace 7.0.1 vulnerabilities and exploits

(subscribe to this query)

9

CVSSv2

Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691....

Cisco Unified Meetingplace 5 Cisco Unified Meetingplace 5.0 Cisco Unified Meetingplace 6.0 Cisco Unified Meetingplace 6.0.170.0 Cisco Unified Meetingplace 6.0.244 Cisco Unified Meetingplace 7.0 Cisco Unified Meetingplace 7.0.1 Cisco Unified Meetingplace 7.0.2

6.8

CVSSv2

Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: some of these details are...

Cisco Unified Meetingplace 5.4 Cisco Unified Meetingplace 6.0 Cisco Unified Meetingplace 6.1 Cisco Unified Meetingplace 7.0 Cisco Unified Meetingplace 7.0.1 Cisco Unified Meetingplace 7.0.2 Cisco Unified Meetingplace 7.0.3 Cisco Unified Meetingplace

10

CVSSv2

Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) administrator accounts via a crafted URL in a request to the internal interface,...

Cisco Unified Meetingplace 5.2 Cisco Unified Meetingplace 5.3 Cisco Unified Meetingplace 5.4 Cisco Unified Meetingplace 6.0 Cisco Unified Meetingplace 7.0 Cisco Unified Meetingplace 7.0.1 Cisco Unified Meetingplace 7.0.2

7.8

CVSSv2

Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote attackers to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua66341....

Cisco Unified Meetingplace 7.0 Cisco Unified Meetingplace 7.0.1 Cisco Unified Meetingplace 7.0.2 Cisco Unified Meetingplace 7.0.3 Cisco Unified Meetingplace 7.1 Cisco Unified Meetingplace Cisco Unified Meetingplace 8.0 Cisco Unified Meetingplace 8.5 Cisco Unified Meetingplace 8.5.1 Cisco Unified Meetingplace 8.5.2 Cisco Unified Meetingplace 8.5.3 Cisco Unified Meetingplace 8.5.4

7.6

CVSSv2

The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging...

Cisco Unified Meetingplace 7.0 Cisco Unified Meetingplace 7.0.1 Cisco Unified Meetingplace 7.0.2 Cisco Unified Meetingplace 7.0.3 Cisco Unified Meetingplace 7.1 Cisco Unified Meetingplace 8.0 Cisco Unified Meetingplace 8.5 Cisco Unified Meetingplace 8.5.1 Cisco Unified Meetingplace 8.5.2 Cisco Unified Meetingplace 8.5.3