CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2014-3303
https://notcve.org/view.php?id=CVE-2014-3303
28 Jul 2014 — The web framework in Cisco WebEx Meetings Server does not properly restrict the content of query strings, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81713. El Framework web en Cisco WebEx Meetings Server no restringe debidamente el contenido de las cadenas de consultas, lo que permite a atacantes remotos obtener información sensible mediante la lectura de (1) los registros de ac... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3303 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2014-3304
https://notcve.org/view.php?id=CVE-2014-3304
28 Jul 2014 — The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID CSCuj81722. OutlookAction Class en Cisco WebEx Meetings Server permite a atacantes remotos enumerar las cuentas de los usuarios mediante la entrada en URLs manipuladas y la examinación de los mensajes devueltos, también conocido como Bug ID CSCuj81722. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3304 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0CVE-2014-3301
https://notcve.org/view.php?id=CVE-2014-3301
26 Jul 2014 — The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned messages, aka Bug ID CSCuj81700. El controlador ProfileAction en Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) y anteriores permite a atacantes remotos obtener información sensible mediante la lectura de trazas de la pila en mensajes devueltos, también conocido como Bug ID CSCuj81700. • http://secunia.com/advisories/60573 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2014-3305
https://notcve.org/view.php?id=CVE-2014-3305
26 Jul 2014 — Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuj81735. Vulnerabilidad de CSRF en el Framework web en Cisco WebEx Meetings Server 1.5(.1.131) y anteriores permite a atacantes remotos secuestrar la autenticación de victimas no especificadas a través de vectores desconocidos, también conocido como Bug ID CSCuj81735. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3305 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2014-3310
https://notcve.org/view.php?id=CVE-2014-3310
10 Jul 2014 — The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463. La funcionalidad File Transfer en WebEx Meetings Client en Cisco WebEx Meetings Server y WebEx Meeting Center no verifica que un fichero solicitado fuera un fichero ofrecido, lo que permite a atacantes remotos leer ficheros arbit... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3310 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 3%CPEs: 2EXPL: 0CVE-2014-3311
https://notcve.org/view.php?id=CVE-2014-3311
10 Jul 2014 — Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467. Desbordamiento de buffer basado en memoria dinámica en la funcionalidad de compartir ficheros en WebEx Meetings Client en Cisco WebEx Meetings Server y WebEx Meeting Center permite a atacantes remotos ejecutar código arbitrario a través de datos manipulados, también co... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3311 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2014-3296
https://notcve.org/view.php?id=CVE-2014-3296
21 Jun 2014 — The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain sensitive meeting information via a crafted URL, aka Bug ID CSCum03527. La interfaz programática XML (XML PI) en Cisco WebEx Meeting Server 1.5(.1.131) y anteriores permite a usuarios remotos autenticados obtener información sensible de reuniones a través de una URL manipulada, también conocido como Bug ID CSCum03527. • http://secunia.com/advisories/59263 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2014-3294
https://notcve.org/view.php?id=CVE-2014-3294
10 Jun 2014 — Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81691. Cisco WebEx Meeting Server no restringe debidamente el contenido de URLs, lo que permite a usuarios remotos autenticados obtener información sensible mediante la lectura de (1) registros de acceso al servidor web, (2) registros Referer del servid... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3294 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2014-3286
https://notcve.org/view.php?id=CVE-2014-3286
08 Jun 2014 — The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661. El Framework web en Cisco WebEx Meeting Server no restringe debidamente el contenido de mensajes de respuesta, lo que permite a atacantes remotos obtener información sensible a través de una URL manipulada, también conocido como Bug IDs CSCuj81685, ... • http://secunia.com/advisories/58571 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.3EPSS: 0%CPEs: 8EXPL: 0CVE-2014-2199
https://notcve.org/view.php?id=CVE-2014-2199
20 May 2014 — meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738. meetinginfo.do en Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Ce... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •