Vulnerabilities > Cisco > Unified Meetingplace
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2013-09-16 | CVE-2013-5495 | Cross-Site Scripting vulnerability in Cisco Unified Meetingplace Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681. | 4.3 |
| 2013-09-16 | CVE-2013-5494 | Cross-Site Request Forgery (CSRF) vulnerability in Cisco products Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209 and CSCui44674. | 6.8 |
| 2013-04-11 | CVE-2013-1168 | Authentication Bypass vulnerability in Cisco Unified MeetingPlace The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885. | 7.6 |
| 2013-02-15 | CVE-2013-1128 | Cross-Site Request Forgery (CSRF) vulnerability in Cisco Unified Meetingplace Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. | 6.8 |
| 2013-02-15 | CVE-2013-1123 | Cross-Site Scripting vulnerability in Cisco Unified Meetingplace 7.0 Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706. | 4.3 |
| 2012-11-02 | CVE-2012-5416 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco Unified Meetingplace Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote attackers to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua66341. | 7.8 |
| 2012-05-03 | CVE-2011-4232 | Information Exposure vulnerability in Cisco Unified Meetingplace 6.1/8.5 The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070. | 5.0 |
| 2012-05-02 | CVE-2012-0337 | SQL Injection vulnerability in Cisco Unified Meetingplace 7.1 SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939. | 6.5 |
| 2010-01-28 | CVE-2010-0142 | Permissions, Privileges, and Access Controls vulnerability in Cisco Unified Meetingplace MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530. | 8.5 |
| 2010-01-28 | CVE-2010-0141 | Credentials Management vulnerability in Cisco Unified Meetingplace 6.0/6.0.170.0/6.0.244 MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935. | 6.4 |