UM
Product
Unified Meetingplace
25
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Unified Meetingplace to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-4233 | – | Jul 2 | SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID… Affected: 8.6(1.2) |
| CVE-2015-4214 | – | Jun 24 | Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID CSCuu33050 Affected: 8.6(1.2); 8.6(1.9) |
| CVE-2015-0764 | – | Jun 4 | Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted resource request, aka Bug ID CSCus95603 Affected: 8.6(1.9) |
| CVE-2015-0763 | – | Jun 4 | Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL,… Affected: 8.6(1.2) |
| CVE-2015-0762 | – | Jun 4 | Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject… Affected: 8.6(1.2); 8.6(1.9) |
| CVE-2015-0758 | – | May 30 | The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration… Affected: 8.6(1.9) |
| CVE-2015-0705 | – | Apr 22 | Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to hijack… Affected: 8.6(1.9) |
| CVE-2015-0704 | – | Apr 22 | Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the authentication of arbitrary… Affected: 8.6(1.9) |
| CVE-2015-0703 | – | Apr 21 | Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to inject arbitrary web script or HTML… Affected: 8.6(1.9) |
| CVE-2015-0702 | – | Apr 21 | Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary… Affected: 8.6(1.9) |
| CVE-2013-5495 | – | Sep 16 | Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or… Affected: All versions, or not specified |
| CVE-2013-5494 | – | Sep 16 | Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified… Affected: All versions, or not specified |
| CVE-2013-1168 | – | Apr 11 | The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session… Affected: 7.0; 7.0.1; 7.0.2; 7.0.2; 7.0.3; 7.0.3; +8 more |
| CVE-2013-1128 | – | Feb 15 | Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the authentication of… Affected: through 7.1; 5.4; 6.0; 6.1; 7.0; 7.0.1; +4 more |
| CVE-2013-1123 | – | Feb 15 | Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified… Affected: 7.0 |
| CVE-2012-5416 | – | Nov 2 | Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote attackers to cause a denial of… Affected: through 7.1; 7.0; 7.0.1; 7.0.2; 7.0.2; 7.0.3; +9 more |
| CVE-2011-4232 | – | May 3 | The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote… Affected: 6.1; 8.5 |
| CVE-2012-0337 | – | May 2 | SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka… Affected: 7.1 |
| CVE-2010-0142 | – | Jan 28 | MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID… Affected: 5.2; 5.3; 5.4; 6.0 |
| CVE-2010-0141 | – | Jan 28 | MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database… Affected: 6.0; 6.0.170.0; 6.0.244 |
| CVE-2010-0140 | – | Jan 28 | Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to… Affected: 5.2; 5.3; 5.4; 6.0; 7.0; 7.0.1; +1 more |
| CVE-2010-0139 | – | Jan 28 | Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create,… Affected: 5; 5.0; 6.0; 6.0.170.0; 6.0.244; 7.0; +2 more |
| CVE-2009-0743 | – | Feb 27 | Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0… Affected: 6.0; 7.0 |
| CVE-2007-5581 | – | Nov 8 | Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web… Affected: through 5.4; 4.3.0.246; 4.3.0.246.5; 5; 5.0; 5.2; +2 more |
| CVE-2007-1467 | – | Mar 16 | Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal… Affected: All versions, or not specified |
Showing 25