Vulnerabilities > Cisco > Webex Meetings Server > Medium

DATE CVE VULNERABILITY TITLE RISK
2013-06-06 CVE-2013-1205 Improper Authentication vulnerability in Cisco Webex Meetings Server
The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.
network
cisco CWE-287
4.3
2013-05-04 CVE-2013-1232 Improper Input Validation vulnerability in Cisco products
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252.
network
low complexity
cisco CWE-20
5.0
2013-05-03 CVE-2013-1231 Improper Input Validation vulnerability in Cisco Webex Meetings Server and Webex Node FOR MCS
The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629.
network
low complexity
cisco CWE-20
5.0