Vulnerabilities > Cisco > Unified Meetingplace > 6.1

DATE CVE VULNERABILITY TITLE RISK
2013-02-15 CVE-2013-1128 Cross-Site Request Forgery (CSRF) vulnerability in Cisco Unified Meetingplace
Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903.
network
cisco CWE-352
6.8
2012-05-03 CVE-2011-4232 Information Exposure vulnerability in Cisco Unified Meetingplace 6.1/8.5
The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.
network
low complexity
cisco CWE-200
5.0