CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-0590
https://notcve.org/view.php?id=CVE-2015-0590
17 Jan 2015 — Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing crafted parameters during a meeting-join action, aka Bug ID CSCuo34165. Cisco WebEx Meeting Center permite a atacantes remotos activar atributos de reuniones deshabilitados, y como consecuencia obtener información sensible, mediante la provisión de parámetros manipulados durante una acción meeting-join, también conocido como Bug ID CSCuo34165. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0590 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-0583
https://notcve.org/view.php?id=CVE-2015-0583
14 Jan 2015 — Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281. Cisco WebEx Meeting Center no restringe correctamente el contenido de las URLs, lo que permite a atacantes remotos obtener información sensible a través de vectores relacionados con URIs file:, también conocido como Bug ID CSCus18281. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0583 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2014-3310
https://notcve.org/view.php?id=CVE-2014-3310
10 Jul 2014 — The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463. La funcionalidad File Transfer en WebEx Meetings Client en Cisco WebEx Meetings Server y WebEx Meeting Center no verifica que un fichero solicitado fuera un fichero ofrecido, lo que permite a atacantes remotos leer ficheros arbit... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3310 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 3%CPEs: 2EXPL: 0CVE-2014-3311
https://notcve.org/view.php?id=CVE-2014-3311
10 Jul 2014 — Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467. Desbordamiento de buffer basado en memoria dinámica en la funcionalidad de compartir ficheros en WebEx Meetings Client en Cisco WebEx Meetings Server y WebEx Meeting Center permite a atacantes remotos ejecutar código arbitrario a través de datos manipulados, también co... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3311 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.3EPSS: 0%CPEs: 8EXPL: 0CVE-2014-2199
https://notcve.org/view.php?id=CVE-2014-2199
20 May 2014 — meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738. meetinginfo.do en Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Ce... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2014-0708
https://notcve.org/view.php?id=CVE-2014-0708
20 Mar 2014 — WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) a browser's history, aka Bug ID CSCul98272. WebEx Meeting Center en Cisco WebEx Business Suite no compone debidamente URLs para solicitudes HTTP GET, lo que permite a atacantes remotos obtener información sensible mediante la lectura de (1) registros de acceso del servi... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0708 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2013-6960
https://notcve.org/view.php?id=CVE-2013-6960
14 Dec 2013 — Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36248. Múltiples vulnerabilidades de XSS en Cisco WebEx Meeting Center permite a atacantes remotos inyectar script web o HTML arbitrario a través de una URL manipulada, también conocido como Bug ID CSCul36248. • http://osvdb.org/100904 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2013-6961
https://notcve.org/view.php?id=CVE-2013-6961
14 Dec 2013 — Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36237. Vulnerabilidad de XSS en Collaboration Partner Access Console (CPAC) de Cisco WebEx Meeting Center permite a atacantes remotos inyectar script web o HTML arbitrario a través de una URL manipulada, también conocido como Bug ID CSCul36237. • http://osvdb.org/100905 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2013-6962
https://notcve.org/view.php?id=CVE-2013-6962
14 Dec 2013 — Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36228. Vulnerabilidad de XSS en el subsistema mobile-browser de Cisco WebEx Meeting Center permite a atacantes remotos inyectar script o HTML arbitrario a través de una URL manipulada, también conocido como Bug ID CSCul36228. • http://osvdb.org/100906 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2013-6964
https://notcve.org/view.php?id=CVE-2013-6964
14 Dec 2013 — Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors, aka Bug ID CSCul36197. Cisco WebEx Meeting Center permite a usuarios remotos autenticados evadir un control de acceso intencionado e inyectar contenido desde diferentes sitios WebEx a través de vectores no especificados, también conocido como Bug ID CSCul36197. • http://osvdb.org/100908 • CWE-264: Permissions, Privileges, and Access Controls •