Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified meetingplace 8.5 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2015-4262
The password-change feature in Cisco Unified MeetingPlace Web Conferencing prior to 8.5(5) MR3 and 8.6 prior to 8.6(2) does not check the session ID or require entry of the current password, which allows remote malicious users to reset arbitrary passwords via a crafted HTTP reque...
Cisco Unified Meetingplace Web Conferencing 6.0.417.0Cisco Unified Meetingplace Web Conferencing 6.0 BaseCisco Unified Meetingplace Web Conferencing 8.5\\(3\\)Cisco Unified Meetingplace Web Conferencing 7.0\\(2\\) Sr1Cisco Unified Meetingplace Web Conferencing 7.0\\(2\\)Cisco Unified Meetingplace Web Conferencing 8.5\\(1\\)Cisco Unified Meetingplace Web Conferencing 8.0\\(1\\)Cisco Unified Meetingplace Web Conferencing 8.5\\(2\\) Sr2Cisco Unified Meetingplace Web Conferencing 8.0\\(2\\)Cisco Unified Meetingplace Web Conferencing 8.0\\(1\\) Sr1Cisco Unified Meetingplace Web Conferencing 8.5\\(4\\)Cisco Unified Meetingplace Web Conferencing 7.0\\(1\\)Cisco Unified Meetingplace Web Conferencing 7.1\\(1\\)Cisco Unified Meetingplace Web Conferencing 7.1\\(2\\)Cisco Unified Meetingplace Web Conferencing 7.0\\(3\\)Cisco Unified Meetingplace Web Conferencing 8.5\\(2\\) Sr1Cisco Unified Meetingplace Web Conferencing 8.5\\(2\\)
5
CVSSv2
CVE-2011-4232
The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote malicious users to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.
Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 6.1
7.8
CVSSv2
CVE-2012-5416
Buffer overflow in Cisco Unified MeetingPlace Web Conferencing prior to 7.1MR1 Patch 1, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 allows remote malicious users to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua6634...
Cisco Unified Meetingplace 7.1Cisco Unified MeetingplaceCisco Unified Meetingplace 8.0Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0.3Cisco Unified Meetingplace 8.5.3Cisco Unified Meetingplace 8.5.4Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 8.5.1Cisco Unified Meetingplace 8.5.2Cisco Unified Meetingplace 7.0
6.8
CVSSv2
CVE-2013-5494
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote malicious users to hijack the authentication of arbitrary users, aka Bug IDs CSCui...
Cisco Unified Meetingplace Web Conferencing -Cisco Unified Meetingplace
4.3
CVSSv2
CVE-2013-5495
Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote malicious users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681.
Cisco Unified Meetingplace
6.5
CVSSv2
CVE-2012-0337
SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.
Cisco Unified Meetingplace 7.1
7.6
CVSSv2
CVE-2013-1168
The web server in Cisco Unified MeetingPlace Application Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote malicious users to hijack sessions by lev...
Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0Cisco Unified Meetingplace 7.0.3Cisco Unified Meetingplace 7.1Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 8.0Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 8.5.1Cisco Unified Meetingplace 8.5.2Cisco Unified Meetingplace 8.5.3
9.3
CVSSv2
CVE-2013-1169
Cisco Unified MeetingPlace Web Conferencing Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 2, and 8.5 prior to 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote malicious users to impersonate users via a craf...
Cisco Unified Meetingplace Web Conferencing Server 7.1Cisco Unified Meetingplace Web Conferencing Server 8.0Cisco Unified Meetingplace Web Conferencing Server 8.5
4.3
CVSSv2
CVE-2015-1788
The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL prior to 0.9.8s, 1.0.0 prior to 1.0.0e, 1.0.1 prior to 1.0.1n, and 1.0.2 prior to 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows re...
Openssl OpensslOpenssl Openssl 1.0.1mOpenssl Openssl 1.0.2aOpenssl Openssl 1.0.1jOpenssl Openssl 1.0.0nOpenssl Openssl 1.0.1Openssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.0pOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.0oOpenssl Openssl 1.0.1d
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3400CVE-2023-7252CVE-2024-21111denial of serviceCVE-2024-29661CVE-2024-22856remote attackersencryptionCVE-2023-38299
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook