WM
Product
Webex Meetings Server
135
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 61Medium 29Low 2
Watch
Add Webex Meetings Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-4276 | – | Jul 16 | Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138 Affected: 2.5(1) |
| CVE-2015-0634 | – | May 15 | Cross-site scripting (XSS) vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or… Affected: 2.5; 2.5.0.997 |
| CVE-2015-0668 | – | Mar 20 | Cross-site scripting (XSS) vulnerability in the administration portal in Cisco WebEx Meetings Server 2.5 and 2.5.99.2 allows remote attackers to inject arbitrary web script or… Affected: 2.5; 2.5.99.2 |
| CVE-2015-0589 | – | Feb 7 | The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via… Affected: 1.0; 1.1; 1.5 |
| CVE-2015-0597 | – | Feb 2 | The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs… Affected: through 1.5\(.1.131\) |
| CVE-2015-0596 | – | Feb 2 | Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka… Affected: through 1.5\(.1.131\) |
| CVE-2015-0595 | – | Feb 2 | The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka… Affected: through 1.5\(.1.131\) |
| CVE-2014-8034 | – | Jan 15 | Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach… Affected: 1.5 |
| CVE-2014-8036 | – | Jan 10 | The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invite list via a crafted URL, aka… Affected: All versions, or not specified |
| CVE-2014-8035 | – | Jan 10 | The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to… Affected: All versions, or not specified |
| CVE-2014-8033 | – | Jan 9 | The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain administrator access via crafted API requests, aka Bug ID CSCuj40421 Affected: All versions, or not specified |
| CVE-2014-8032 | – | Jan 9 | The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information via unspecified vectors, aka Bug IDs… Affected: All versions, or not specified |
| CVE-2014-8031 | – | Jan 9 | Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456 Affected: All versions, or not specified |
| CVE-2014-8030 | – | Jan 9 | Cross-site scripting (XSS) vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inject arbitrary web script or HTML via the email parameter,… Affected: All versions, or not specified |
| CVE-2014-3400 | – | Oct 5 | Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344 Affected: All versions, or not specified |
| CVE-2014-3395 | – | Sep 30 | Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343 Affected: 2.5 |
| CVE-2014-3302 | – | Aug 1 | user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain… Affected: through 1.5\(.1.131\); 1.5; 1.5(.1.6) |
| CVE-2014-3304 | – | Jul 28 | The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID… Affected: All versions, or not specified |
| CVE-2014-3303 | – | Jul 28 | The web framework in Cisco WebEx Meetings Server does not properly restrict the content of query strings, which allows remote attackers to obtain sensitive information by reading… Affected: All versions, or not specified |
| CVE-2014-3305 | – | Jul 26 | Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of… Affected: through 1.5\(.1.131\); 1.5; 1.5(.1.6) |
| CVE-2014-3301 | – | Jul 26 | The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading stack traces in… Affected: through 1.5\(.1.131\); 1.5; 1.5(.1.6) |
| CVE-2014-3311 | – | Jul 10 | Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2014-3310 | – | Jul 10 | The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows… Affected: All versions, or not specified |
| CVE-2014-3296 | – | Jun 21 | The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain sensitive meeting information via a… Affected: through 1.5\(.1.131\); 1.5(.1.6) |
| CVE-2014-3294 | – | Jun 10 | Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access… Affected: All versions, or not specified |
| CVE-2014-3286 | – | Jun 8 | The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a… Affected: All versions, or not specified |
| CVE-2014-2199 | – | May 20 | meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business… Affected: through 1.5\(.1.131\) |
| CVE-2014-2186 | – | Apr 30 | Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka… Affected: All versions, or not specified |
| CVE-2014-0682 | – | Jan 29 | Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and (1) join arbitrary meetings, or (2) terminate a meeting without having a host… Affected: All versions, or not specified |
| CVE-2013-6687 | – | Jan 16 | The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by… Affected: All versions, or not specified |
| CVE-2013-5529 | – | Oct 16 | The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allows remote attackers to launch a deployment or cause a denial… Affected: All versions, or not specified |
| CVE-2013-3448 | – | Aug 2 | Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended access restrictions by performing meeting… Affected: All versions, or not specified |
| CVE-2013-1205 | – | Jun 6 | The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys… Affected: All versions, or not specified |
| CVE-2013-1232 | – | May 4 | The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory… Affected: All versions, or not specified |
| CVE-2013-1231 | – | May 3 | The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and… Affected: All versions, or not specified |