WM
Product
Webex Meetings Server
135
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 61Medium 29Low 2
Watch
Add Webex Meetings Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-15414 | 7.8 | Oct 5 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary… Affected: 2.5; 2.5; 2.5; 2.5; 2.5; 2.5.1.29; +12 more |
| CVE-2018-15413 | 7.8 | Oct 5 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary… Affected: 2.5; 2.5; 2.5; 2.5; 2.5; 2.5.1.29; +12 more |
| CVE-2018-15412 | 7.8 | Oct 5 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary… Affected: 2.5; 2.5; 2.5; 2.5; 2.5; 2.5.1.29; +12 more |
| CVE-2018-15411 | 7.8 | Oct 5 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary… Affected: 2.5; 2.5; 2.5; 2.5; 2.5; 2.5.1.29; +12 more |
| CVE-2018-15410 | 7.8 | Oct 5 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary… Affected: 2.5; 2.5; 2.5; 2.5; 2.5; 2.5.1.29; +12 more |
| CVE-2018-15409 | 7.8 | Oct 5 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary… Affected: 2.5; 2.5; 2.5; 2.5; 2.5.1.29; 2.6; +11 more |
| CVE-2018-15408 | 7.8 | Oct 5 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary… Affected: 2.5; 2.5; 2.5; 2.5; 2.5; 2.5.1.29; +12 more |
| CVE-2018-0103 | 7.8 | Jan 4 | A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a local attacker to execute arbitrary code on the… Affected: All versions, or not specified |
| CVE-2019-1868 | 7.5 | Jun 5 | A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to access sensitive system information Affected: 2.6 |
| CVE-2017-6651 | 7.5 | May 16 | A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings Affected: 2.5.1.5; 2.5.1.29; 2.5.99.2; 2.5_base; 2.5_mr1; 2.5_mr2; +26 more |
| CVE-2016-1483 | 7.5 | Sep 19 | Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the account-validation component of an unspecified… Affected: 2.6.0 |
| CVE-2016-1484 | 7.5 | Aug 23 | Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vectors, aka Bug ID… Affected: 2.6.0; 2.6.1.39 |
| CVE-2016-1450 | 7.5 | Jul 15 | Cisco WebEx Meetings Server 2.6 allows remote authenticated users to conduct command-injection attacks via vectors related to an upload's file type, aka Bug ID CSCuy92715 Affected: 2.6.0; 2.6.1.39 |
| CVE-2016-1389 | 7.4 | Apr 28 | Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified… Affected: 2.6.0 |
| CVE-2018-15431 | 7.3 | Oct 5 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary… Affected: 3.0; 3.0; 3.0 |
| CVE-2018-0422 | 7.3 | Oct 5 | A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored files and execute code… Affected: through 3.0; 3.0 |
| CVE-2014-0691 | 7.3 | Oct 24 | Cisco WebEx Meetings Server before 1.1 uses meeting IDs with insufficient entropy, which makes it easier for remote attackers to bypass authentication and join arbitrary meetings… Affected: through 1.0 |
| CVE-2017-3796 | 7.2 | Jan 26 | A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts Affected: 2.6.0 |
| CVE-2020-3471 | 6.5 | Nov 18 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite being expelled from… Affected: before 3.0; 3.0; 3.0; 4.0; 4.0; 4.0 |
| CVE-2017-12359 | 6.5 | Nov 30 | A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker to execute arbitrary code on a system Affected: 2.6.0; 2.7.0 |
| CVE-2017-3880 | 6.5 | Mar 17 | An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meeting information on the Cisco WebEx… Affected: 2.5.1.5; 2.5.1.29; 2.5.99.2; 2.5_base; 2.5_mr1; 2.5_mr2; +25 more |
| CVE-2017-3811 | 6.5 | Mar 17 | An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the… Affected: 2.6 |
| CVE-2021-1525 | 6.1 | Jun 4 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to redirect users to a malicious file Affected: before 3.0; 3.0; 3.0; 3.0; 3.0; 4.0; +5 more |
| CVE-2019-1954 | 6.1 | Aug 8 | A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired… Affected: before 4.0\(1\) |
| CVE-2019-1655 | 6.1 | Jan 24 | Cisco Webex Meetings Server Cross-Site Scripting Vulnerability Affected: 2.8 |
| CVE-2017-12296 | 6.1 | Oct 19 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system Affected: 2.6; 2.7; 2.8 |
| CVE-2017-12257 | 6.1 | Oct 5 | A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user… Affected: All versions, or not specified |
| CVE-2016-1449 | 6.1 | Jul 15 | Cross-site scripting (XSS) vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy92711 Affected: 2.6.0; 2.6.1.39 |
| CVE-2016-1447 | 6.1 | Jul 15 | Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via… Affected: 2.6.0; 2.6.1.39 |
| CVE-2016-1309 | 6.1 | Feb 7 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified… Affected: 2.5.1.5 |
| CVE-2021-1372 | 5.5 | Feb 17 | A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information… Affected: before 4.0; 4.0; 4.0; 4.0; 4.0; 4.0 |
| CVE-2020-3116 | 5.5 | Sep 23 | A vulnerability in the way Cisco Webex applications process Universal Communications Format (UCF) files could allow an attacker to cause a denial of service (DoS) condition Affected: 4.0 |
| CVE-2021-1311 | 5.4 | Jan 13 | A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role… Affected: before 3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +4 more |
| CVE-2017-12294 | 5.4 | Nov 2 | A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system Affected: All versions, or not specified |
| CVE-2017-3795 | 5.4 | Jan 26 | A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user Affected: 2.6.0 |
| CVE-2020-3441 | 5.3 | Nov 18 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information from the meeting room lobby Affected: before 3.0; 3.0; 3.0; 4.0; 4.0; 4.0 |
| CVE-2019-15987 | 5.3 | Nov 26 | A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an… Affected: 4.0 |
| CVE-2018-0111 | 5.3 | Jan 18 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application Affected: All versions, or not specified |
| CVE-2018-0108 | 5.3 | Jan 18 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to collect customer files via an out-of-band XML External Entity (XXE) injection Affected: All versions, or not specified |
| CVE-2017-12363 | 5.3 | Nov 30 | A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system Affected: 2.6.0.8; 2.7 |
| CVE-2017-12295 | 5.3 | Nov 2 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application Affected: All versions, or not specified |
| CVE-2017-3797 | 5.3 | Jan 26 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco WebEx administration server Affected: 2.7.1; 2.7_base |
| CVE-2021-1517 | 4.3 | Jun 4 | A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security… Affected: before 3.0; 3.0; 3.0; 3.0; 3.0; 4.0; +5 more |
| CVE-2020-3345 | 4.3 | Jul 16 | A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to modify a web page in the context of… Affected: through 4.0; 4.0; 4.0; 4.0 |
| CVE-2021-1221 | 4.1 | Feb 4 | A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a… Affected: before 3.0; 3.0; 3.0; 4.0; 4.0 |
| CVE-2020-3502 | 4.1 | Aug 17 | Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex… Affected: 3.0; 3.0; 3.0; 3.0; 4.0; 4.0; +1 more |
| CVE-2020-3501 | 4.1 | Aug 17 | Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex… Affected: 3.0; 3.0; 3.0; 3.0; 4.0; 4.0; +1 more |
| CVE-2020-3126 | 3.5 | Apr 13 | vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker to bypass security protections Affected: t39.3 |
| CVE-2018-0109 | 2.7 | Jan 18 | A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application Affected: All versions, or not specified |
| CVE-2015-4281 | – | Jul 22 | Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs… Affected: 2.5(1) |