Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

unified meetingplace web conferencing server vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2013-3438
The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote malicious users to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.
Cisco Unified Meetingplace Web Conferencing -
9
CVSSv2
CVE-2009-0614
Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 prior to 6.0(517.0) (aka 6.0 MR4) and 7.0 prior to 7.0(2) (aka 7.0 MR1) allows remote malicious users to bypass authentication and obtain administrative access via a crafted URL.
Cisco Unified Meetingplace Web Conferencing
9.3
CVSSv2
CVE-2013-1169
Cisco Unified MeetingPlace Web Conferencing Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 2, and 8.5 prior to 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote malicious users to impersonate users via a craf...
Cisco Unified Meetingplace Web Conferencing Server 7.1Cisco Unified Meetingplace Web Conferencing Server 8.0Cisco Unified Meetingplace Web Conferencing Server 8.5
7.8
CVSSv2
CVE-2012-5416
Buffer overflow in Cisco Unified MeetingPlace Web Conferencing prior to 7.1MR1 Patch 1, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 allows remote malicious users to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua6634...
Cisco Unified Meetingplace 7.1Cisco Unified MeetingplaceCisco Unified Meetingplace 8.0Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0.3Cisco Unified Meetingplace 8.5.3Cisco Unified Meetingplace 8.5.4Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 8.5.1Cisco Unified Meetingplace 8.5.2Cisco Unified Meetingplace 7.0
7.6
CVSSv2
CVE-2013-1168
The web server in Cisco Unified MeetingPlace Application Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote malicious users to hijack sessions by lev...
Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0Cisco Unified Meetingplace 7.0.3Cisco Unified Meetingplace 7.1Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 8.0Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 8.5.1Cisco Unified Meetingplace 8.5.2Cisco Unified Meetingplace 8.5.3
6.5
CVSSv2
CVE-2012-0337
SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.
Cisco Unified Meetingplace 7.1
9
CVSSv2
CVE-2010-0139
Cisco Unified MeetingPlace 7 prior to 7.0(2.3) hotfix 5F, 6 prior to 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote malicious users to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691.
Cisco Unified Meetingplace 5.0Cisco Unified Meetingplace 7.0Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 5Cisco Unified Meetingplace 6.0.170.0Cisco Unified Meetingplace 6.0.244Cisco Unified Meetingplace 6.0Cisco Unified Meetingplace 7.0.1
10
CVSSv2
CVE-2010-0140
Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 prior to 7.0(2.3) hotfix 5F, 6 prior to 6.0.639.3, and possibly 5 allow remote malicious users to create (1) user or (2) administrator accounts via a crafted URL in a request to the internal in...
Cisco Unified Meetingplace 5.2Cisco Unified Meetingplace 5.4Cisco Unified Meetingplace 7.0Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 6.0Cisco Unified Meetingplace 5.3Cisco Unified Meetingplace 7.0.2
8.5
CVSSv2
CVE-2010-0142
MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530.
Cisco Unified Meetingplace 6.0Cisco Unified Meetingplace 5.3Cisco Unified Meetingplace 5.4Cisco Unified Meetingplace 5.2
3.5
CVSSv2
CVE-2009-0743
Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 prior to 6.0(517.0) (aka 6.0 MR4) and 7.0 prior to 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML ...
Cisco Unified Meetingplace 6.0Cisco Unified Meetingplace 7.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook