Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
webex meetings server vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2014-3286
The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote malicious users to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661.
Cisco Webex Meetings Server -
NA
CVE-2014-8032
The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information via unspecified vectors, aka Bug IDs CSCuj40453 and CSCuj40449.
Cisco Webex Meetings Server -
1 Article
NA
CVE-2014-8033
The play/modules component in Cisco WebEx Meetings Server allows remote malicious users to obtain administrator access via crafted API requests, aka Bug ID CSCuj40421.
Cisco Webex Meetings Server -
1 Article
NA
CVE-2014-8035
The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote malicious users to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247.
Cisco Webex Meetings Server -
NA
CVE-2014-8036
The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote malicious users to modify a meeting's invite list via a crafted URL, aka Bug ID CSCuj40254.
Cisco Webex Meetings Server -
NA
CVE-2014-8030
Cross-site scripting (XSS) vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote malicious users to inject arbitrary web script or HTML via the email parameter, aka Bug ID CSCuj40381.
Cisco Webex Meetings Server -
1 Article
NA
CVE-2014-8031
Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows remote malicious users to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456.
Cisco Webex Meetings Server -
1 Article
NA
CVE-2014-3294
Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81691.
Cisco Webex Meetings Server -
NA
CVE-2013-1205
The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote malicious users to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.
Cisco Webex Meetings Server -
NA
CVE-2014-3400
Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344.
Cisco Webex Meetings Server -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661
open redirect
CVE-2024-25512
CVE-2024-33788
command injection
SSTI
CVE-2024-0043
CVE-2024-29210
CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »