Webex Business Suite 31

DATE	CVE	VULNERABILITY TITLE	RISK
2018-10-05	CVE-2018-15436	Cross-site Scripting vulnerability in Cisco products A vulnerability in the web-based management interface of Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected service. network low complexity cisco CWE-79	6.1
2018-10-05	CVE-2018-15418	Integer Underflow (Wrap or Wraparound) vulnerability in Cisco products A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. local low complexity cisco CWE-191	7.8
2018-10-05	CVE-2018-15410	Improper Input Validation vulnerability in Cisco products A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. local low complexity cisco CWE-20	7.8
2018-10-05	CVE-2018-15409	Improper Input Validation vulnerability in Cisco products A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. local low complexity cisco CWE-20	7.8
2018-10-05	CVE-2018-0422	Incorrect Permission Assignment for Critical Resource vulnerability in Cisco products A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored files and execute code on a targeted device with the privilege level of the user. local low complexity cisco CWE-732	7.3
2018-05-02	CVE-2018-0264	Improper Input Validation vulnerability in Cisco products A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker to execute arbitrary code on the system of a targeted user. network low complexity cisco CWE-20 critical	9.6
2018-04-19	CVE-2018-0112	Improper Input Validation vulnerability in Cisco products A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. network low complexity cisco CWE-20 critical	9.0