U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): Webex Meetings
  • Search Type: Search All
  • Match: Exact
  • CPE Name Search: false
There are 126 matching records.
Displaying matches 121 through 126.
Vuln ID Summary CVSS Severity
CVE-2014-0682

Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and (1) join arbitrary meetings, or (2) terminate a meeting without having a host role, via a crafted URL, aka Bug ID CSCuj42346.

Published: January 29, 2014; 1:34:05 PM -0500 		V3.x:(not available)
 V2.0: 4.9 MEDIUM
CVE-2013-6687

The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by reading HTML source code, aka Bug ID CSCul33876.

Published: January 16, 2014; 2:55:04 PM -0500 		V3.x:(not available)
 V2.0: 4.0 MEDIUM
CVE-2013-3448

Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended access restrictions by performing meeting operations after account deactivation, aka Bug ID CSCuh33315.

Published: August 02, 2013; 8:10:40 AM -0400 		V3.x:(not available)
 V2.0: 4.0 MEDIUM
CVE-2013-1205

The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.

Published: June 06, 2013; 9:02:13 AM -0400 		V3.x:(not available)
 V2.0: 4.3 MEDIUM
CVE-2013-1232

The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252.

Published: May 03, 2013; 11:24:41 PM -0400 		V3.x:(not available)
 V2.0: 5.0 MEDIUM
CVE-2013-1231

The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629.

Published: May 03, 2013; 7:57:44 AM -0400 		V3.x:(not available)
 V2.0: 5.0 MEDIUM