Cisco Webex Training Center vulnerabilities

16 CVEs affecting Cisco Webex Training Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-15987, published 2019-11-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-6753, published 2017-07-25. High severity, CVSS 8.8. EPSS: 6% chance of exploitation in the next 30 days. A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected…
CVE-2013-6972, published 2013-12-14. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126.
CVE-2013-6968, published 2013-12-14. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a…
CVE-2013-6973, published 2013-12-14. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121.
CVE-2013-6966, published 2013-12-17. Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days. Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36031.
CVE-2013-6971, published 2013-12-14. Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days. Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140.
CVE-2013-6963, published 2013-12-14. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID…
CVE-2013-6969, published 2013-12-14. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990.
CVE-2013-6965, published 2013-12-14. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access…
CVE-2013-6709, published 2013-12-14. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join…

Latest

CVE-2019-15987, published 2019-11-26. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote…
CVE-2014-2199, published 2014-05-20. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before…