Vulnerabilities > Cisco > Webex Meetings Server > 1.1

DATE CVE VULNERABILITY TITLE RISK
2020-04-15 CVE-2020-3194 Improper Input Validation vulnerability in Cisco products
A vulnerability in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
network
cisco CWE-20
critical
9.3
2020-03-04 CVE-2020-3128 Improper Input Validation vulnerability in Cisco products
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
network
cisco CWE-20
critical
9.3
2020-03-04 CVE-2020-3127 Improper Input Validation vulnerability in Cisco products
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
network
cisco CWE-20
critical
9.3
2019-08-08 CVE-2019-1954 Improper Input Validation vulnerability in Cisco Webex Meetings Server
A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired web page.
network
cisco CWE-20
5.8
2019-05-15 CVE-2019-1773 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco products
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
local
low complexity
cisco CWE-119
7.8
2018-10-05 CVE-2018-0422 Incorrect Permission Assignment for Critical Resource vulnerability in Cisco products
A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored files and execute code on a targeted device with the privilege level of the user.
6.9
2015-02-07 CVE-2015-0589 Improper Input Validation vulnerability in Cisco Webex Meetings Server 1.0/1.1/1.5
The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460.
network
low complexity
cisco CWE-20
critical
9.0
2015-02-02 CVE-2015-0597 Improper Input Validation vulnerability in Cisco Webex Meetings Server
The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159.
network
low complexity
cisco CWE-20
5.0
2015-02-02 CVE-2015-0596 Cross-Site Request Forgery (CSRF) vulnerability in Cisco Webex Meetings Server
Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163.
network
cisco CWE-352
6.8
2015-02-02 CVE-2015-0595 Information Exposure vulnerability in Cisco Webex Meetings Server
The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079.
network
low complexity
cisco CWE-200
5.0