Unified Meetingplace (Cisco) - vulnerabilities (CVEs)
25 CVEs, 0 in the last 30 days, 30 known versions, newest CVE from 2015-07-02. Vendor: Cisco.
CVEs of Unified Meetingplace
- CVE-2015-4233 - CVSS 6.5 (medium), 2015-07-02: SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified…
- CVE-2015-4214 - CVSS 4 (medium), 2015-06-24: Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID…
- CVE-2015-0764 - CVSS 5 (medium), 2015-06-04: Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted resource request, aka Bug ID CSCus95603.
- CVE-2015-0763 - CVSS 5 (medium), 2015-06-04: Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information…
- CVE-2015-0762 - CVSS 4.3 (medium), 2015-06-04: Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote…
- CVE-2015-0758 - CVSS 4 (medium), 2015-05-30: The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external…
- CVE-2015-0705 - CVSS 6.8 (medium), 2015-04-22: Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows remote…
- CVE-2015-0704 - CVSS 6.8 (medium), 2015-04-22: Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the…
- CVE-2015-0703 - CVSS 4.3 (medium), 2015-04-21: Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to inject…
- CVE-2015-0702 - CVSS 9 (critical), 2015-04-21: Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to…
- CVE-2013-5494 - CVSS 6.8 (medium), 2013-09-16: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing…
- CVE-2013-5495 - CVSS 4.3 (medium), 2013-09-16: Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject…
- CVE-2013-1168 - CVSS 7.6 (high), 2013-04-11: The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not…
- CVE-2013-1128 - CVSS 6.8 (medium), 2013-02-15: Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the…
- CVE-2013-1123 - CVSS 4.3 (medium), 2013-02-15: Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or…
- CVE-2012-5416 - CVSS 7.8 (high), 2012-11-02: Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote attackers…
- CVE-2011-4232 - CVSS 5 (medium), 2012-05-03: The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which…
- CVE-2012-0337 - CVSS 6.5 (medium), 2012-05-02: SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via…
- CVE-2010-0139 - CVSS 9 (critical), 2010-01-28: Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote…
- CVE-2010-0142 - CVSS 8.5 (high), 2010-01-28: MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication…
- CVE-2010-0141 - CVSS 6.4 (medium), 2010-01-28: MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data…
- CVE-2010-0140 - CVSS 10 (critical), 2010-01-28: Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow…
- CVE-2009-0743 - CVSS 3.5 (low), 2009-02-27: Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka…
- CVE-2007-5581 - CVSS 4.3 (medium), 2007-11-08: Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to…
- CVE-2007-1467 - CVSS 3.5 (low), 2007-03-16: Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client,…
