cisco unified meetingplace 7.0 vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace prior to 7.1(2.2000) allow remote malicious users to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: some of these details are...

Cisco Unified Meetingplace Cisco Unified Meetingplace 5.4 Cisco Unified Meetingplace 6.0 Cisco Unified Meetingplace 6.1 Cisco Unified Meetingplace 7.0 Cisco Unified Meetingplace 7.0.1 Cisco Unified Meetingplace 7.0.2 Cisco Unified Meetingplace 7.0.3

Buffer overflow in Cisco Unified MeetingPlace Web Conferencing prior to 7.1MR1 Patch 1, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 allows remote malicious users to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua6634...

Cisco Unified Meetingplace Cisco Unified Meetingplace 7.0 Cisco Unified Meetingplace 7.0.1 Cisco Unified Meetingplace 7.0.2 Cisco Unified Meetingplace 7.0.3 Cisco Unified Meetingplace 7.1 Cisco Unified Meetingplace 8.0 Cisco Unified Meetingplace 8.5 Cisco Unified Meetingplace 8.5.1 Cisco Unified Meetingplace 8.5.2 Cisco Unified Meetingplace 8.5.3 Cisco Unified Meetingplace 8.5.4

Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 prior to 6.0(517.0) (aka 6.0 MR4) and 7.0 prior to 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML ...

Cisco Unified Meetingplace 6.0 Cisco Unified Meetingplace 7.0

The password-change feature in Cisco Unified MeetingPlace Web Conferencing prior to 8.5(5) MR3 and 8.6 prior to 8.6(2) does not check the session ID or require entry of the current password, which allows remote malicious users to reset arbitrary passwords via a crafted HTTP reque...

Cisco Unified Meetingplace Web Conferencing 6.0.417.0 Cisco Unified Meetingplace Web Conferencing 6.0 Base Cisco Unified Meetingplace Web Conferencing 7.0(1)Cisco Unified Meetingplace Web Conferencing 7.0(2)Cisco Unified Meetingplace Web Conferencing 7.0(2) Sr1 Cisco Unified Meetingplace Web Conferencing 7.0(3)Cisco Unified Meetingplace Web Conferencing 7.1(1)Cisco Unified Meetingplace Web Conferencing 7.1(2)Cisco Unified Meetingplace Web Conferencing 8.0(1)Cisco Unified Meetingplace Web Conferencing 8.0(1) Sr1 Cisco Unified Meetingplace Web Conferencing 8.0(2)Cisco Unified Meetingplace Web Conferencing 8.5(1)

Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706.

Cisco Unified Meetingplace 7.0

The web server in Cisco Unified MeetingPlace Application Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote malicious users to hijack sessions by lev...

Cisco Unified Meetingplace 7.0 Cisco Unified Meetingplace 7.0.1 Cisco Unified Meetingplace 7.0.2 Cisco Unified Meetingplace 7.0.3 Cisco Unified Meetingplace 7.1 Cisco Unified Meetingplace 8.0 Cisco Unified Meetingplace 8.5 Cisco Unified Meetingplace 8.5.1 Cisco Unified Meetingplace 8.5.2 Cisco Unified Meetingplace 8.5.3

SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.

Cisco Unified Meetingplace 7.1

Cisco Unified MeetingPlace Web Conferencing Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 2, and 8.5 prior to 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote malicious users to impersonate users via a craf...

Cisco Unified Meetingplace Web Conferencing Server 7.1 Cisco Unified Meetingplace Web Conferencing Server 8.0 Cisco Unified Meetingplace Web Conferencing Server 8.5

Cisco Unified MeetingPlace 7 prior to 7.0(2.3) hotfix 5F, 6 prior to 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote malicious users to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691.

Cisco Unified Meetingplace 5 Cisco Unified Meetingplace 5.0 Cisco Unified Meetingplace 6.0 Cisco Unified Meetingplace 6.0.170.0 Cisco Unified Meetingplace 6.0.244 Cisco Unified Meetingplace 7.0 Cisco Unified Meetingplace 7.0.1 Cisco Unified Meetingplace 7.0.2

Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 prior to 7.0(2.3) hotfix 5F, 6 prior to 6.0.639.3, and possibly 5 allow remote malicious users to create (1) user or (2) administrator accounts via a crafted URL in a request to the internal in...

Cisco Unified Meetingplace 5.2 Cisco Unified Meetingplace 5.3 Cisco Unified Meetingplace 5.4 Cisco Unified Meetingplace 6.0 Cisco Unified Meetingplace 7.0 Cisco Unified Meetingplace 7.0.1 Cisco Unified Meetingplace 7.0.2

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook