4 results (0.006 seconds)

CVSS: 5.3EPSS: 0%CPEs: 8EXPL: 0

20 May 2014 — meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738. meetinginfo.do en Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Ce... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

14 Dec 2013 — Cross-site scripting (XSS) vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540. Cross-site scripting (XSS) en la página de administración de creación de producto en Cisco WebEx Sales Center permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una URL manipulada, también conocido como Bug ID CSCul25540. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6711 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

14 Dec 2013 — Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557. Vulnerabilidad de redirección abierta en Cisco WebEx Sales Center permite a atacantes remotos redirigir usuarios a sitios web de forma arbitraria y conducir ataques phishing a través de vectores no especificados, tambien conocido como Bug ID CSCul25557. • http://osvdb.org/100901 • CWE-20: Improper Input Validation •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

14 Dec 2013 — Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020. Vulnerabilidad de redirección abierta en el subsistema mobile-browser de Cisco WebEx Sales Center permite a atacantes remotos redirigir a usuarios hacia sitios web arbitrario y llevar a cabo ataques de phishing a través de vectores sin especificar, también conocido como Bug ID CSCu... • http://osvdb.org/100912 • CWE-20: Improper Input Validation •