Webex Meeting Center (Cisco) - vulnerabilities (CVEs)

31 CVEs, 0 in the last 30 days, 34 known versions, newest CVE from 2019-11-26. Vendor: Cisco.

CVEs of Webex Meeting Center

CVE-2019-15987 - CVSS 5.3 (medium), 2019-11-26: A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center…
CVE-2017-12365 - CVSS 4.3 (medium), 2017-11-30: A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a…
CVE-2017-12360 - CVSS 4.3 (medium), 2017-11-30: A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of service (DoS)…
CVE-2017-12359 - CVSS 6.5 (medium), 2017-11-30: A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker to execute…
CVE-2017-12366 - CVSS 6.1 (medium), 2017-11-30: A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of…
CVE-2017-12297 - CVSS 5 (medium), 2017-11-30: A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection…
CVE-2017-12298 - CVSS 6.1 (medium), 2017-10-19: A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of…
CVE-2017-12286 - CVSS 5.5 (medium), 2017-10-19: A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected…
CVE-2017-6753 - CVSS 8.8 (high), 2017-07-25: A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary…
CVE-2017-3823 - CVSS 8.8 (high), 2017-02-01: An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox,…
CVE-2017-3799 - CVSS 5.4 (medium), 2017-01-26: A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection. More…
CVE-2016-1410 - CVSS 7.5 (high), 2016-05-28: Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by (1) attending or (2)…
CVE-2015-6360 - CVSS 7.5 (high), 2016-04-21: The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka…
CVE-2015-4212 - CVSS 5 (medium), 2015-06-24: Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka…
CVE-2015-4208 - CVSS 7.5 (high), 2015-06-24: Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or…
CVE-2015-4210 - CVSS 4.3 (medium), 2015-06-23: Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka…
CVE-2015-4209 - CVSS 6.4 (medium), 2015-06-23: Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive…
CVE-2015-4207 - CVSS 5 (medium), 2015-06-23: Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended…
CVE-2015-4194 - CVSS 5 (medium), 2015-06-19: The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the…
CVE-2015-0590 - CVSS 5 (medium), 2015-01-17: Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing…
CVE-2015-0583 - CVSS 5 (medium), 2015-01-14: Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related…
CVE-2014-3311 - CVSS 5.1 (medium), 2014-07-10: Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote…
CVE-2014-3310 - CVSS 4.3 (medium), 2014-07-10: The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an…
CVE-2014-2199 - CVSS 5 (medium), 2014-05-20: meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier,…
CVE-2014-0708 - CVSS 5 (medium), 2014-03-21: WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive…
CVE-2013-6961 - CVSS 4.3 (medium), 2013-12-14: Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject…
CVE-2013-6970 - CVSS 5 (medium), 2013-12-14: Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug ID…
CVE-2013-6960 - CVSS 4.3 (medium), 2013-12-14: Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or HTML via a crafted…
CVE-2013-6964 - CVSS 3.5 (low), 2013-12-14: Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors,…
CVE-2013-6962 - CVSS 4.3 (medium), 2013-12-14: Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script…
CVE-2010-3270 - CVSS 6.8 (medium), 2011-02-02: Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authenticated users to…