cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2018-15461,https://securityvulnerability.io/vulnerability/CVE-2018-15461,Cisco Webex Business Suite Cross-Site Scripting Vulnerability,"A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convincing a user to click a crafted URL. To exploit this vulnerability, the attacker may provide a link that directs a user to a malicious site and use misleading language or instructions to persuade the user to follow the provided link.",Cisco,Cisco Webex Meeting Center,6.1,MEDIUM,0.0007099999929778278,false,,false,false,true,2024-08-05T10:17:53.000Z,,false,false,,2019-01-10T23:29:00.000Z,0
CVE-2017-12366,https://securityvulnerability.io/vulnerability/CVE-2017-12366,,"A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf78635,, CSCvg52440.",Cisco,Cisco Webex Meeting Center,6.1,MEDIUM,0.0010300000431016088,false,,false,false,false,,,false,false,,2017-11-30T09:00:00.000Z,0
CVE-2017-12297,https://securityvulnerability.io/vulnerability/CVE-2017-12297,,"A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a ""URL Redirection Vulnerability."" The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An attacker could exploit this vulnerability by sending a malicious URL to the Cisco WebEx Meeting Center. An exploit could allow the attacker to connect to arbitrary hosts. Cisco Bug IDs: CSCvf63843.",Cisco,Cisco Webex Meeting Center,5,MEDIUM,0.0008500000112690032,false,,false,false,false,,,false,false,,2017-11-30T09:00:00.000Z,0
CVE-2017-12298,https://securityvulnerability.io/vulnerability/CVE-2017-12298,,"A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf78615, CSCvf78628.",Cisco,Cisco Webex Meeting Center,6.1,MEDIUM,0.0010300000431016088,false,,false,false,false,,,false,false,,2017-10-19T08:00:00.000Z,0
CVE-2017-3799,https://securityvulnerability.io/vulnerability/CVE-2017-3799,,"A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection. More Information: CSCzu78401. Known Affected Releases: T28.1.",Cisco,Cisco Webex Meeting Center T28.1,5.4,MEDIUM,0.0010999999940395355,false,,false,false,false,,,false,false,,2017-01-26T07:45:00.000Z,0
CVE-2016-1410,https://securityvulnerability.io/vulnerability/CVE-2016-1410,,"Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by (1) attending or (2) hosting a meeting, aka Bug ID CSCux84312.",Cisco,Webex Meeting Center,7.5,HIGH,0.0027799999807029963,false,,false,false,false,,,false,false,,2016-05-28T01:00:00.000Z,0
CVE-2015-4212,https://securityvulnerability.io/vulnerability/CVE-2015-4212,,"Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466.",Cisco,Webex Meeting Center,,,0.001129999989643693,false,,false,false,false,,,false,false,,2015-06-24T10:00:00.000Z,0
CVE-2015-4208,https://securityvulnerability.io/vulnerability/CVE-2015-4208,,"Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398.",Cisco,Webex Meeting Center,,,0.002090000081807375,false,,false,false,false,,,false,false,,2015-06-24T10:00:00.000Z,0
CVE-2015-4207,https://securityvulnerability.io/vulnerability/CVE-2015-4207,,"Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147.",Cisco,Webex Meeting Center,,,0.0010000000474974513,false,,false,false,false,,,false,false,,2015-06-23T14:00:00.000Z,0
CVE-2015-4210,https://securityvulnerability.io/vulnerability/CVE-2015-4210,,"Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806.",Cisco,Webex Meeting Center,,,0.0010300000431016088,false,,false,false,false,,,false,false,,2015-06-23T14:00:00.000Z,0
CVE-2015-4209,https://securityvulnerability.io/vulnerability/CVE-2015-4209,,"Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913.",Cisco,Webex Meeting Center,,,0.0035099999513477087,false,,false,false,false,,,false,false,,2015-06-23T14:00:00.000Z,0
CVE-2015-4194,https://securityvulnerability.io/vulnerability/CVE-2015-4194,,"The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive information via a series of requests, aka Bug ID CSCuf28861.",Cisco,Webex Meeting Center,,,0.001129999989643693,false,,false,false,false,,,false,false,,2015-06-19T01:00:00.000Z,0
CVE-2015-0590,https://securityvulnerability.io/vulnerability/CVE-2015-0590,,"Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing crafted parameters during a meeting-join action, aka Bug ID CSCuo34165.",Cisco,Webex Meeting Center,,,0.0027799999807029963,false,,false,false,false,,,false,false,,2015-01-17T11:00:00.000Z,0
CVE-2015-0583,https://securityvulnerability.io/vulnerability/CVE-2015-0583,,"Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281.",Cisco,Webex Meeting Center,,,0.0027799999807029963,false,,false,false,false,,,false,false,,2015-01-14T19:00:00.000Z,0
CVE-2014-3311,https://securityvulnerability.io/vulnerability/CVE-2014-3311,,"Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467.",Cisco,"Webex Meeting Center,Webex Meetings Server",,,0.019740000367164612,false,,false,false,false,,,false,false,,2014-07-10T10:00:00.000Z,0
CVE-2014-3310,https://securityvulnerability.io/vulnerability/CVE-2014-3310,,"The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463.",Cisco,"Webex Meeting Center,Webex Meetings Server",,,0.0031799999997019768,false,,false,false,false,,,false,false,,2014-07-10T10:00:00.000Z,0
CVE-2014-2199,https://securityvulnerability.io/vulnerability/CVE-2014-2199,,"meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.",Cisco,"Webex Business Suite,Webex Training Center,Webex Meeting Center,Webex Sales Center,Webex Event Center,Webex Meetings Server",,,0.0014199999859556556,false,,false,false,false,,,false,false,,2014-05-20T10:00:00.000Z,0
CVE-2014-0708,https://securityvulnerability.io/vulnerability/CVE-2014-0708,,"WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) a browser's history, aka Bug ID CSCul98272.",Cisco,Webex Meeting Center,,,0.0025500000920146704,false,,false,false,false,,,false,false,,2014-03-21T01:04:00.000Z,0
CVE-2013-6964,https://securityvulnerability.io/vulnerability/CVE-2013-6964,,"Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors, aka Bug ID CSCul36197.",Cisco,Webex Meeting Center,,,0.002050000010058284,false,,false,false,false,,,false,false,,2013-12-14T22:00:00.000Z,0
CVE-2013-6970,https://securityvulnerability.io/vulnerability/CVE-2013-6970,,"Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug ID CSCul35928.",Cisco,Webex Meeting Center,,,0.0031799999997019768,false,,false,false,false,,,false,false,,2013-12-14T22:00:00.000Z,0
CVE-2013-6960,https://securityvulnerability.io/vulnerability/CVE-2013-6960,,"Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36248.",Cisco,Webex Meeting Center,,,0.00279000005684793,false,,false,false,false,,,false,false,,2013-12-14T22:00:00.000Z,0
CVE-2013-6962,https://securityvulnerability.io/vulnerability/CVE-2013-6962,,"Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36228.",Cisco,Webex Meeting Center,,,0.002529999939724803,false,,false,false,false,,,false,false,,2013-12-14T22:00:00.000Z,0
CVE-2013-6961,https://securityvulnerability.io/vulnerability/CVE-2013-6961,,"Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36237.",Cisco,Webex Meeting Center,,,0.002529999939724803,false,,false,false,false,,,false,false,,2013-12-14T22:00:00.000Z,0
CVE-2010-3270,https://securityvulnerability.io/vulnerability/CVE-2010-3270,,"Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authenticated users to execute arbitrary code by providing a crafted .atp file and then disconnecting from a meeting.  NOTE: since this is a site-specific issue with no expected action for consumers, it might be REJECTed.",Cisco,Webex Meeting Center,,,0.020059999078512192,false,,false,false,false,,,false,false,,2011-02-02T22:00:00.000Z,0