- EPSS 0.26%
- Published 14.01.2015 19:59:04
- Last modified 12.04.2025 10:46:40
Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281.
CVE-2014-3311
- EPSS 3.06%
- Published 10.07.2014 11:06:27
- Last modified 12.04.2025 10:46:40
Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467.
CVE-2014-3310
- EPSS 0.29%
- Published 10.07.2014 11:06:27
- Last modified 12.04.2025 10:46:40
The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bu...
- EPSS 0.38%
- Published 20.05.2014 11:13:37
- Last modified 12.04.2025 10:46:40
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29....
- EPSS 0.23%
- Published 21.03.2014 01:04:02
- Last modified 12.04.2025 10:46:40
WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) a browse...
- EPSS 0.29%
- Published 14.12.2013 22:55:14
- Last modified 11.04.2025 00:51:21
Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug ID CSCul35928.
CVE-2013-6964
- EPSS 0.38%
- Published 14.12.2013 22:55:14
- Last modified 11.04.2025 00:51:21
Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors, aka Bug ID CSCul36197.
CVE-2013-6962
- EPSS 0.3%
- Published 14.12.2013 22:55:14
- Last modified 11.04.2025 00:51:21
Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36228.
CVE-2013-6961
- EPSS 0.3%
- Published 14.12.2013 22:55:14
- Last modified 11.04.2025 00:51:21
Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36237.
CVE-2013-6960
- EPSS 0.5%
- Published 14.12.2013 22:55:14
- Last modified 11.04.2025 00:51:21
Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36248.