Unscored severity · published May 20, 2014
CVE-2014-2199
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business…
–
CVSS
1.7%
EPSS
No
On KEV
Description
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WB
Webex Business Suite · Cisco
27.0; 28.0; 29.0 · source: NVD
WE
Webex Event Center · Cisco
All versions, or not specified · source: NVD
WM
Webex Meeting Center · Cisco
All versions, or not specified · source: NVD
WM
Webex Meetings Server · Cisco
through 1.5\(.1.131\) · source: NVD
WS
Webex Sales Center · Cisco
All versions, or not specified · source: NVD
WT
Webex Training Center · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2199
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2199
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34252
Third Party Advisory
http://www.securitytracker.com/id/1030251
More from Webex Business Suite
9.6
CVE-2018-0104
A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a…
7.8
CVE-2019-15286
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary…
7.8
CVE-2019-15284
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary…
7.8
CVE-2019-1929
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary…
7.8
CVE-2019-1928
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary…