Show filters
492 Total Results
Displaying 381-390 of 492
Sort by:
Attacker Value
Unknown
CVE-2015-4281
Disclosure Date: July 22, 2015 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCus56150 and CSCus56146.
0
Attacker Value
Unknown
CVE-2015-4276
Disclosure Date: July 16, 2015 (last updated October 05, 2023)
Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138.
0
Attacker Value
Unknown
CVE-2015-4233
Disclosure Date: July 02, 2015 (last updated October 05, 2023)
SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037.
0
Attacker Value
Unknown
CVE-2015-4212
Disclosure Date: June 24, 2015 (last updated October 05, 2023)
Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466.
0
Attacker Value
Unknown
CVE-2015-4208
Disclosure Date: June 24, 2015 (last updated October 05, 2023)
Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398.
0
Attacker Value
Unknown
CVE-2015-4214
Disclosure Date: June 24, 2015 (last updated October 05, 2023)
Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID CSCuu33050.
0
Attacker Value
Unknown
CVE-2015-4209
Disclosure Date: June 23, 2015 (last updated October 05, 2023)
Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913.
0
Attacker Value
Unknown
CVE-2015-4210
Disclosure Date: June 23, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806.
0
Attacker Value
Unknown
CVE-2015-4207
Disclosure Date: June 23, 2015 (last updated October 05, 2023)
Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147.
0
Attacker Value
Unknown
CVE-2015-4194
Disclosure Date: June 19, 2015 (last updated October 05, 2023)
The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive information via a series of requests, aka Bug ID CSCuf28861.
0
