Vulnerabilities > Cisco > Meeting Server > 1.8.base

DATE CVE VULNERABILITY TITLE RISK
2023-11-01 CVE-2023-20255 Unspecified vulnerability in Cisco Meeting Server
A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
network
low complexity
cisco
5.3
2021-10-21 CVE-2021-40122 Improper Resource Shutdown or Release vulnerability in Cisco Meeting Server
A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
network
low complexity
cisco CWE-404
7.5
2020-02-19 CVE-2020-3160 Improper Input Validation vulnerability in Cisco Meeting Server
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications.
network
cisco CWE-20
4.3
2018-06-07 CVE-2018-0263 Insecure Default Initialization of Resource vulnerability in Cisco Meeting Server
A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an affected system.
low complexity
cisco CWE-1188
3.3
2017-11-30 CVE-2017-12362 Unspecified vulnerability in Cisco Meeting Server
A vulnerability in Cisco Meeting Server versions prior to 2.2.2 could allow an authenticated, remote attacker to cause the system to reload, resulting in a denial of service (DoS) condition.
network
low complexity
cisco
7.8
2017-09-13 CVE-2017-12249 Exposure of Resource to Wrong Sphere vulnerability in Cisco Meeting Server
A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker to gain unauthenticated or unauthorized access to components of or sensitive information in an affected system.
network
low complexity
cisco CWE-668
critical
9.0
2016-11-03 CVE-2016-6448 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco Meeting Server
A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system.
network
low complexity
cisco CWE-119
7.5
2016-11-03 CVE-2016-6447 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco Meeting APP and Meeting Server
A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system.
network
low complexity
cisco CWE-119
7.5
2016-10-27 CVE-2016-6446 Information Exposure vulnerability in Cisco Meeting Server
A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server.
network
low complexity
cisco CWE-200
5.0
2016-10-27 CVE-2016-6445 Improper Input Validation vulnerability in Cisco Meeting Server
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user.
network
low complexity
cisco CWE-20
6.4