Cisco Unified Meetingplace Web Conferencing vulnerabilities

5 CVEs affecting Cisco Unified Meetingplace Web Conferencing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4262, published 2015-07-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-4262, published 2015-07-24. High severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days. The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows…
CVE-2009-0614, published 2009-02-26. High severity, CVSS 9.0. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass…
CVE-2013-3438, published 2013-07-24. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters,…
CVE-2013-3419, published 2013-07-11. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID…
CVE-2013-5494, published 2013-09-16. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote…