Product:

Webex_meetings_server

(Cisco)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 133
Date Id Summary Products Score Patch Annotated
2018-01-18 CVE-2018-0108 A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to collect customer files via an out-of-band XML External Entity (XXE) injection. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to the ability of an attacker to perform an out-of-band XXE injection on the system, which could allow an attacker to capture customer files and redirect them to another destination... Webex_meetings_server 5.3
2018-01-04 CVE-2018-0104 A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a targeted user. The attacker could exploit this vulnerability by sending the user a link or email attachment with a malicious ARF file and persuading the user to follow the link or launch the file. Successful exploitation could allow the attacker to execute arbitrary code on the user's system. This vulnerability affects... Webex_business_suite, Webex_meetings, Webex_meetings_server, Webex_network_recording_player 9.6
2018-01-04 CVE-2018-0103 A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a local attacker to execute arbitrary code on the system of a user. The attacker could exploit this vulnerability by sending the user a link or email attachment with a malicious ARF file and persuading the user to follow the link or launch the file. Successful exploitation could allow the attacker to execute arbitrary code on the user's system. This vulnerability... Webex_business_suite, Webex_meetings, Webex_meetings_server, Webex_network_recording_player 7.8
2017-07-25 CVE-2017-6753 A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected system. This vulnerability affects the browser extensions for Cisco WebEx Meetings Server, Cisco WebEx Centers (Meeting Center, Event Center, Training Center, and Support Center), and Cisco WebEx Meetings when they are running on Microsoft Windows. The vulnerability is due... Webex_event_center, Webex_meeting_center, Webex_meetings, Webex_meetings_server, Webex_meetings_server_2\.0, Webex_meetings_server_2\.0_mr8_patch, Webex_meetings_server_2\.0_mr9_patch, Webex_meetings_server_2\.5, Webex_meetings_server_2\.5_mr2_patch, Webex_meetings_server_2\.5_mr5_patch, Webex_meetings_server_2\.5_mr6_patch, Webex_meetings_server_2\.6, Webex_meetings_server_2\.6_mr1_patch, Webex_meetings_server_2\.6_mr2_patch, Webex_meetings_server_2\.6_mr3_patch, Webex_meetings_server_2\.7, Webex_meetings_server_2\.7_mr1_patch, Webex_meetings_server_2\.7_mr2_patch, Webex_support_center, Webex_training_center 8.8
2017-11-30 CVE-2017-12372 A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted... Webex_meetings, Webex_meetings_server 9.6
2017-11-30 CVE-2017-12368 A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted... Webex_meetings, Webex_meetings_server 9.6
2017-11-30 CVE-2017-12367 A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted... Webex_meetings_server 9.6
2017-11-30 CVE-2017-12363 A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the welcome message to a meeting. A successful exploit could allow the attacker to modify the welcome message of any known meeting. Cisco Bug IDs: CSCvf68695. Webex_meetings_server 5.3
2017-10-19 CVE-2017-12296 A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A... Webex_meetings_server 6.1
2017-11-02 CVE-2017-12295 A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to the HTTP header reply from the Cisco WebEx Meetings Server to the client, which could include internal network information that should be restricted. An attacker could exploit the vulnerability by attempting to use... Webex_meetings_server 5.3