Webex Meeting Center vulnerabilities | LiveThreat CVE Feed

Product

Webex Meeting Center

by Cisco · last CVE Nov 26, 2019

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities31 In the news0 Timeline

Severity mix

Critical 0High 4Medium 9Low 0

Severity

All severities31 Critical0 High4 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Webex Meeting Center to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-6753	8.8	6%	Jul 25	A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the… Affected: t30_base; t31_base; t32_base
CVE-2017-3823	8.8	27%	Feb 1	An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class… Affected: 2.6_base; 2.6_mr1; 2.6_mr1; 2.6_mr2; 2.6_mr2; 2.6_mr3; +8 more
CVE-2016-1410	7.5	2%	May 28	Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by (1) attending or (2) hosting a meeting, aka Bug… Affected: All versions, or not specified
CVE-2015-6360	7.5	8%	Apr 21	The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686 Affected: base
CVE-2017-12359	6.5	2%	Nov 30	A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker to execute arbitrary code on a system Affected: t29; t30; t31; t32
CVE-2017-12366	6.1	1%	Nov 30	A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system Affected: t32.6
CVE-2017-12298	6.1	1%	Oct 19	A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system Affected: All versions, or not specified
CVE-2017-12286	5.5	0%	Oct 19	A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead… Affected: 1.9.26
CVE-2017-3799	5.4	1%	Jan 26	A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection Affected: wbs28_base
CVE-2019-15987	5.3	2%	Nov 26	A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an… Affected: All versions, or not specified
CVE-2017-12297	5.0	1%	Nov 30	A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The… Affected: t30; t30; t30; t31; t31; t32; +5 more
CVE-2017-12365	4.3	1%	Nov 30	A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information Affected: t32.6
CVE-2017-12360	4.3	1%	Nov 30	A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of service (DoS) condition Affected: t29; t30; t31; t32
CVE-2015-4212	–	3%	Jun 24	Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466 Affected: All versions, or not specified
CVE-2015-4208	–	3%	Jun 24	Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection… Affected: All versions, or not specified
CVE-2015-4210	–	2%	Jun 23	Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806 Affected: All versions, or not specified
CVE-2015-4209	–	3%	Jun 23	Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list… Affected: All versions, or not specified
CVE-2015-4207	–	3%	Jun 23	Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by… Affected: All versions, or not specified
CVE-2015-4194	–	3%	Jun 19	The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or… Affected: All versions, or not specified
CVE-2015-0590	–	2%	Jan 17	Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing crafted parameters during a… Affected: All versions, or not specified
CVE-2015-0583	–	1%	Jan 14	Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug… Affected: All versions, or not specified
CVE-2014-3311	–	3%	Jul 10	Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute… Affected: All versions, or not specified
CVE-2014-3310	–	1%	Jul 10	The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows… Affected: All versions, or not specified
CVE-2014-2199	–	2%	May 20	meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business… Affected: All versions, or not specified
CVE-2014-0708	–	1%	Mar 21	WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading… Affected: All versions, or not specified
CVE-2013-6970	–	1%	Dec 14	Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug ID CSCul35928 Affected: All versions, or not specified
CVE-2013-6964	–	2%	Dec 14	Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors, aka Bug ID CSCul36197 Affected: All versions, or not specified
CVE-2013-6962	–	2%	Dec 14	Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted… Affected: All versions, or not specified
CVE-2013-6961	–	2%	Dec 14	Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or… Affected: All versions, or not specified
CVE-2013-6960	–	2%	Dec 14	Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID… Affected: All versions, or not specified
CVE-2010-3270	–	4%	Feb 2	Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authenticated users to execute arbitrary code by… Affected: 27.0