Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified meetingplace 7.1 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2015-4262
The password-change feature in Cisco Unified MeetingPlace Web Conferencing prior to 8.5(5) MR3 and 8.6 prior to 8.6(2) does not check the session ID or require entry of the current password, which allows remote malicious users to reset arbitrary passwords via a crafted HTTP reque...
Cisco Unified Meetingplace Web Conferencing 6.0.417.0Cisco Unified Meetingplace Web Conferencing 6.0 BaseCisco Unified Meetingplace Web Conferencing 8.5\\(3\\)Cisco Unified Meetingplace Web Conferencing 7.0\\(2\\) Sr1Cisco Unified Meetingplace Web Conferencing 7.0\\(2\\)Cisco Unified Meetingplace Web Conferencing 8.5\\(1\\)Cisco Unified Meetingplace Web Conferencing 8.0\\(1\\)Cisco Unified Meetingplace Web Conferencing 8.5\\(2\\) Sr2Cisco Unified Meetingplace Web Conferencing 8.0\\(2\\)Cisco Unified Meetingplace Web Conferencing 8.0\\(1\\) Sr1Cisco Unified Meetingplace Web Conferencing 8.5\\(4\\)Cisco Unified Meetingplace Web Conferencing 7.0\\(1\\)Cisco Unified Meetingplace Web Conferencing 7.1\\(1\\)Cisco Unified Meetingplace Web Conferencing 7.1\\(2\\)Cisco Unified Meetingplace Web Conferencing 7.0\\(3\\)Cisco Unified Meetingplace Web Conferencing 8.5\\(2\\) Sr1Cisco Unified Meetingplace Web Conferencing 8.5\\(2\\)
7.8
CVSSv2
CVE-2012-5416
Buffer overflow in Cisco Unified MeetingPlace Web Conferencing prior to 7.1MR1 Patch 1, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 allows remote malicious users to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua6634...
Cisco Unified Meetingplace 7.1Cisco Unified MeetingplaceCisco Unified Meetingplace 8.0Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0.3Cisco Unified Meetingplace 8.5.3Cisco Unified Meetingplace 8.5.4Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 8.5.1Cisco Unified Meetingplace 8.5.2Cisco Unified Meetingplace 7.0
6.8
CVSSv2
CVE-2013-1128
Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace prior to 7.1(2.2000) allow remote malicious users to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: some of these details are...
Cisco Unified Meetingplace 5.4Cisco Unified Meetingplace 6.1Cisco Unified MeetingplaceCisco Unified Meetingplace 6.0Cisco Unified Meetingplace 7.0Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 7.0.3
6.5
CVSSv2
CVE-2012-0337
SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.
Cisco Unified Meetingplace 7.1
7.6
CVSSv2
CVE-2013-1168
The web server in Cisco Unified MeetingPlace Application Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote malicious users to hijack sessions by lev...
Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0Cisco Unified Meetingplace 7.0.3Cisco Unified Meetingplace 7.1Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 8.0Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 8.5.1Cisco Unified Meetingplace 8.5.2Cisco Unified Meetingplace 8.5.3
9.3
CVSSv2
CVE-2013-1169
Cisco Unified MeetingPlace Web Conferencing Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 2, and 8.5 prior to 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote malicious users to impersonate users via a craf...
Cisco Unified Meetingplace Web Conferencing Server 7.1Cisco Unified Meetingplace Web Conferencing Server 8.0Cisco Unified Meetingplace Web Conferencing Server 8.5
5
CVSSv2
CVE-2014-3569
The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected ...
Openssl Openssl 1.0.1j
5
CVSSv2
CVE-2015-3193
The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 prior to 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote malicious users to obt...
Openssl Openssl 1.0.2aOpenssl Openssl 1.0.2bOpenssl Openssl 1.0.2cOpenssl Openssl 1.0.2Openssl Openssl 1.0.2dNodejs Node.jsCanonical Ubuntu Linux 15.10Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04
5
CVSSv2
CVE-2015-1794
The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 prior to 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.
Openssl Openssl 1.0.2aOpenssl Openssl 1.0.2bOpenssl Openssl 1.0.2cOpenssl Openssl 1.0.2Openssl Openssl 1.0.2d
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook