Cisco

Unified Meetingplace

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2013-5494

  • EPSS 0.12%
  • Veröffentlicht 16.09.2013 13:02:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary ...

4.3

CVE-2013-5495

  • EPSS 0.26%
  • Veröffentlicht 16.09.2013 13:02:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681.

7.6

CVE-2013-1168

  • EPSS 1.05%
  • Veröffentlicht 11.04.2013 10:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hija...

6.8

CVE-2013-1128

  • EPSS 0.13%
  • Veröffentlicht 15.02.2013 12:09:29
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: so...

4.3

CVE-2013-1123

  • EPSS 0.52%
  • Veröffentlicht 15.02.2013 12:09:28
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706.

7.8

CVE-2012-5416

  • EPSS 0.61%
  • Veröffentlicht 02.11.2012 04:46:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote attackers to cause a denial of service (daemon hang) via unspecified parameters in a POST request, ak...

5

CVE-2011-4232

  • EPSS 0.23%
  • Veröffentlicht 03.05.2012 10:11:39
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCt...

6.5

CVE-2012-0337

  • EPSS 0.25%
  • Veröffentlicht 02.05.2012 10:09:21
  • Zuletzt bearbeitet 11.04.2025 00:51:21

SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.

9

CVE-2010-0139

  • EPSS 0.65%
  • Veröffentlicht 28.01.2010 20:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCt...

10

CVE-2010-0140

  • EPSS 0.64%
  • Veröffentlicht 28.01.2010 20:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) administrator accounts via a crafted URL in a reques...