t31.23.2

DATE	CVE	VULNERABILITY TITLE	RISK
2018-10-05	CVE-2018-15436	Cross-site Scripting vulnerability in Cisco products A vulnerability in the web-based management interface of Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected service. network low complexity cisco CWE-79	6.1
2018-05-02	CVE-2018-0264	Improper Input Validation vulnerability in Cisco products A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker to execute arbitrary code on the system of a targeted user. network low complexity cisco CWE-20 critical	9.6