WM
Product
Webex Meetings Server
135
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 61Medium 29Low 2
Watch
Add Webex Meetings Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3471 | 6.5 | Nov 18 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite being expelled from… Affected: before 3.0; 3.0; 3.0; 4.0; 4.0; 4.0 |
| CVE-2017-12359 | 6.5 | Nov 30 | A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker to execute arbitrary code on a system Affected: 2.6.0; 2.7.0 |
| CVE-2017-3880 | 6.5 | Mar 17 | An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meeting information on the Cisco WebEx… Affected: 2.5.1.5; 2.5.1.29; 2.5.99.2; 2.5_base; 2.5_mr1; 2.5_mr2; +25 more |
| CVE-2017-3811 | 6.5 | Mar 17 | An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the… Affected: 2.6 |
| CVE-2021-1525 | 6.1 | Jun 4 | Cisco Webex Meetings and Webex Meetings Server File Redirect Vulnerability Affected: before 3.0; 3.0; 3.0; 3.0; 3.0; 4.0; +5 more |
| CVE-2019-1954 | 6.1 | Aug 8 | A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired… Affected: before 4.0\(1\) |
| CVE-2019-1655 | 6.1 | Jan 24 | Cisco Webex Meetings Server Cross-Site Scripting Vulnerability Affected: 2.8 |
| CVE-2017-12296 | 6.1 | Oct 19 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system Affected: 2.6; 2.7; 2.8 |
| CVE-2017-12257 | 6.1 | Oct 5 | A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user… Affected: All versions, or not specified |
| CVE-2016-1449 | 6.1 | Jul 15 | Cross-site scripting (XSS) vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy92711 Affected: 2.6.0; 2.6.1.39 |
| CVE-2016-1447 | 6.1 | Jul 15 | Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via… Affected: 2.6.0; 2.6.1.39 |
| CVE-2016-1309 | 6.1 | Feb 7 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified… Affected: 2.5.1.5 |
| CVE-2021-1372 | 5.5 | Feb 17 | A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information… Affected: before 4.0; 4.0; 4.0; 4.0; 4.0; 4.0 |
| CVE-2020-3116 | 5.5 | Sep 23 | A vulnerability in the way Cisco Webex applications process Universal Communications Format (UCF) files could allow an attacker to cause a denial of service (DoS) condition Affected: 4.0 |
| CVE-2021-1311 | 5.4 | Jan 13 | A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role… Affected: before 3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +4 more |
| CVE-2017-12294 | 5.4 | Nov 2 | A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system Affected: All versions, or not specified |
| CVE-2017-3795 | 5.4 | Jan 26 | A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user Affected: 2.6.0 |
| CVE-2020-3441 | 5.3 | Nov 18 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information from the meeting room lobby Affected: before 3.0; 3.0; 3.0; 4.0; 4.0; 4.0 |
| CVE-2019-15987 | 5.3 | Nov 26 | A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an… Affected: 4.0 |
| CVE-2018-0111 | 5.3 | Jan 18 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application Affected: All versions, or not specified |
| CVE-2018-0108 | 5.3 | Jan 18 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to collect customer files via an out-of-band XML External Entity (XXE) injection Affected: All versions, or not specified |
| CVE-2017-12363 | 5.3 | Nov 30 | A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system Affected: 2.6.0.8; 2.7 |
| CVE-2017-12295 | 5.3 | Nov 2 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application Affected: All versions, or not specified |
| CVE-2017-3797 | 5.3 | Jan 26 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco WebEx administration server Affected: 2.7.1; 2.7_base |
| CVE-2021-1517 | 4.3 | Jun 4 | Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerability Affected: before 3.0; 3.0; 3.0; 3.0; 3.0; 4.0; +5 more |
| CVE-2020-3345 | 4.3 | Jul 16 | A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to modify a web page in the context of… Affected: through 4.0; 4.0; 4.0; 4.0 |
| CVE-2021-1221 | 4.1 | Feb 4 | A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a… Affected: before 3.0; 3.0; 3.0; 4.0; 4.0 |
| CVE-2020-3502 | 4.1 | Aug 17 | Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex… Affected: 3.0; 3.0; 3.0; 3.0; 4.0; 4.0; +1 more |
| CVE-2020-3501 | 4.1 | Aug 17 | Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex… Affected: 3.0; 3.0; 3.0; 3.0; 4.0; 4.0; +1 more |
Showing 29