CVE-2015-4262: Cisco Unified Meetingplace Web Conferencing

High severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days.

The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows remote attackers to reset arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuu51839.

Affected products

• Cisco Unified Meetingplace Web Conferencing: version 6.0.417.0 only; version 6.0_base only; version 7.0(1) only; version 7.0(2) only; version 7.0(2)_sr1 only; version 7.0(3) only; …

Published 2015-07-24. Last modified 2026-06-17.