Cisco Webex Meeting Center vulnerabilities

31 CVEs affecting Cisco Webex Meeting Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-15987, published 2019-11-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-3823, published 2017-02-01. High severity, CVSS 8.8. EPSS: 27.2% chance of exploitation in the next 30 days. An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class ActiveX control…
CVE-2015-6360, published 2016-04-21. High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days. The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
CVE-2017-6753, published 2017-07-25. High severity, CVSS 8.8. EPSS: 6% chance of exploitation in the next 30 days. A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected…
CVE-2010-3270, published 2011-02-02. Medium severity, CVSS 6.8. EPSS: 4.2% chance of exploitation in the next 30 days. Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authenticated users to execute arbitrary code by providing a crafted…
CVE-2014-3311, published 2014-07-10. Medium severity, CVSS 5.1. EPSS: 3.4% chance of exploitation in the next 30 days. Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted…
CVE-2015-4209, published 2015-06-23. Medium severity, CVSS 6.4. EPSS: 3.1% chance of exploitation in the next 30 days. Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and…
CVE-2015-4207, published 2015-06-23. Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days. Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a…
CVE-2015-4212, published 2015-06-24. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466.
CVE-2015-4194, published 2015-06-19. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a…
CVE-2015-4208, published 2015-06-24. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors…

Latest

CVE-2019-15987, published 2019-11-26. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote…
CVE-2017-12366, published 2017-11-30. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is…
CVE-2017-12365, published 2017-11-30. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker…
CVE-2017-12360, published 2017-11-30. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of service (DoS) condition. An attacker could exploit this…
CVE-2017-12359, published 2017-11-30. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker to execute arbitrary code on a system. An attacker could…
CVE-2017-12297, published 2017-11-30. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The vulnerability is due…
CVE-2017-12298, published 2017-10-19. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is…
CVE-2017-12286, published 2017-10-19. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead to the disclosure…