CVE-2016-1309

Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843.

Score

CVSS 3.0 6.1 Medium

Status

Modified - psirt@cisco.com

Published

2016-02-07

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Webex Meetings Server (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160202-wms
• http://www.securitytracker.com/id/1034919