CVE-2013-1168: Cisco Unified Meetingplace

High severity, CVSS 7.6. EPSS: 1.6% chance of exploitation in the next 30 days.

The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885.

Affected products

• Cisco Unified Meetingplace: version 7.0 only; version 7.0.1 only; version 7.0.2 only; version 7.0.3 only; version 7.1 only; version 8.0 only; …

Published 2013-04-11. Last modified 2026-06-16.