2.0.3

DATE	CVE	VULNERABILITY TITLE	RISK
2016-10-27	CVE-2016-6445	Improper Input Validation vulnerability in Cisco Meeting Server A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user. network low complexity cisco CWE-20 critical	9.1
2016-10-27	CVE-2016-6444	Cross-Site Request Forgery (CSRF) vulnerability in Cisco Meeting Server A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a Web Bridge user. network low complexity cisco CWE-352	8.8