8.5.3

DATE	CVE	VULNERABILITY TITLE	RISK
2013-04-11	CVE-2013-1168	Authentication Bypass vulnerability in Cisco Unified MeetingPlace The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885. network high complexity cisco	7.6
2012-11-02	CVE-2012-5416	Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco Unified Meetingplace Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote attackers to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua66341. network low complexity cisco CWE-119	7.8