Cisco Webex Social vulnerabilities

5 CVEs affecting Cisco Webex Social, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3392, published 2013-06-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-1245, published 2013-05-16. Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days. The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows…
CVE-2013-1107, published 2013-02-06. Medium severity, CVSS 4.0. EPSS: 0.9% chance of exploitation in the next 30 days. The search function in Cisco Webex Social (formerly Cisco Quad) allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235.
CVE-2012-6397, published 2013-01-17. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco WebEx Social (formerly Cisco Quad) allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID…
CVE-2013-1244, published 2013-05-16. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the portal module in Cisco WebEx Social allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL in the link field in…
CVE-2013-3392, published 2013-06-21. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405…