Meeting Server (Cisco) - vulnerabilities (CVEs)

31 CVEs, 0 in the last 30 days, 109 known versions, newest CVE from 2023-11-01. Vendor: Cisco.

CVEs of Meeting Server

CVE-2023-20255 - CVSS 5.3 (medium), 2023-11-01: A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2021-40122 - CVSS 7.5 (high), 2021-10-21: A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service…
CVE-2021-1524 - CVSS 6.5 (medium), 2021-06-16: A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected…
CVE-2020-3197 - CVSS 5.3 (medium), 2020-07-16: A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT…
CVE-2020-3160 - CVSS 5.3 (medium), 2020-02-19: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote…
CVE-2019-1623 - CVSS 6.7 (medium), 2019-06-20: A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to inject arbitrary commands as the root…
CVE-2019-1794 - CVSS 5.1 (medium), 2019-04-18: A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker to load a binary of their choosing.…
CVE-2019-1676 - CVSS 7.5 (high), 2019-02-08: A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote…
CVE-2019-1678 - CVSS 4.3 (medium), 2019-02-07: A vulnerability in Cisco Meeting Server could allow an authenticated, remote attacker to cause a partial denial of service (DoS) to Cisco Meetings application…
CVE-2018-15446 - CVSS 7.5 (high), 2018-11-08: A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to…
CVE-2018-0439 - CVSS 8.8 (high), 2018-10-05: A vulnerability in the web-based management interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request…
CVE-2018-0371 - CVSS 6.5 (medium), 2018-06-21: A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition.…
CVE-2018-0359 - CVSS 5.5 (medium), 2018-06-21: A vulnerability in the session identification management functionality of the web-based management interface for Cisco Meeting Server could allow an…
CVE-2018-0263 - CVSS 7.4 (high), 2018-06-07: A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an…
CVE-2018-0280 - CVSS 7.5 (high), 2018-05-17: A vulnerability in the Real-Time Transport Protocol (RTP) bitstream processing of the Cisco Meeting Server could allow an unauthenticated, remote attacker to…
CVE-2018-0262 - CVSS 8.1 (high), 2018-05-02: A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to components of, or sensitive information…
CVE-2017-12362 - CVSS 6.5 (medium), 2017-11-30: A vulnerability in Cisco Meeting Server versions prior to 2.2.2 could allow an authenticated, remote attacker to cause the system to reload, resulting in a…
CVE-2017-12311 - CVSS 5.8 (medium), 2017-11-16: A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server media…
CVE-2017-12264 - CVSS 5.3 (medium), 2017-10-05: A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2017-12249 - CVSS 9.1 (critical), 2017-09-13: A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker to gain…
CVE-2017-12224 - CVSS 6.5 (medium), 2017-09-07: A vulnerability in the ability for guest users to join meetings via a hyperlink with Cisco Meeting Server could allow an authenticated, remote attacker to…
CVE-2017-6794 - CVSS 6.7 (medium), 2017-09-07: A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to perform command injection and escalate…
CVE-2017-6763 - CVSS 7.5 (high), 2017-08-07: A vulnerability in the implementation of the H.264 protocol in Cisco Meeting Server (CMS) 2.1.4 could allow an unauthenticated, remote attacker to cause a…
CVE-2017-3830 - CVSS 7.5 (high), 2017-02-22: A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2017-3837 - CVSS 8.1 (high), 2017-02-22: An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Conferencing Server, could allow an…
CVE-2016-6448 - CVSS 9.8 (critical), 2016-11-03: A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary…
CVE-2016-6447 - CVSS 9.8 (critical), 2016-11-03: A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This…
CVE-2016-6446 - CVSS 7.5 (high), 2016-10-27: A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More…
CVE-2016-6445 - CVSS 9.1 (critical), 2016-10-27: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18…
CVE-2016-6444 - CVSS 8.8 (high), 2016-10-27: A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a Web…
CVE-2016-1451 - CVSS 6.1 (medium), 2016-07-15: Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Meeting Server (formerly Acano Conferencing Server) 1.7 through 1.9…