Cisco Webex Sales Center vulnerabilities

4 CVEs affecting Cisco Webex Sales Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2199, published 2014-05-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-6967, published 2013-12-14. Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days. Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified…
CVE-2013-6959, published 2013-12-14. Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days. Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557.
CVE-2013-6711, published 2013-12-14. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka…
CVE-2014-2199, published 2014-05-20. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before…