Vulnerabilities > Cisco > Webex Training Center

DATE CVE VULNERABILITY TITLE RISK
2019-11-26 CVE-2019-15987 Improper Authentication vulnerability in Cisco products
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames.
network
low complexity
cisco CWE-287
5.0
2017-07-25 CVE-2017-6753 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco products
A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected system.
network
cisco CWE-119
critical
9.3
2014-05-20 CVE-2014-2199 Information Exposure vulnerability in Cisco products
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.
network
low complexity
cisco CWE-200
5.0
2013-12-17 CVE-2013-6966 Improper Input Validation vulnerability in Cisco Webex Training Center
Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36031.
network
cisco CWE-20
5.8
2013-12-14 CVE-2013-6973 Information Exposure vulnerability in Cisco Webex Training Center
Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121.
network
cisco CWE-200
4.3
2013-12-14 CVE-2013-6972 Information Exposure vulnerability in Cisco Webex Training Center
Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126.
network
low complexity
cisco CWE-200
5.0
2013-12-14 CVE-2013-6971 Improper Input Validation vulnerability in Cisco Webex Training Center
Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140.
network
cisco CWE-20
5.8
2013-12-14 CVE-2013-6969 Improper Input Validation vulnerability in Cisco Webex Training Center
The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990.
network
cisco CWE-20
4.3
2013-12-14 CVE-2013-6968 Information Exposure vulnerability in Cisco Webex Training Center
Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003.
network
low complexity
cisco CWE-200
5.0
2013-12-14 CVE-2013-6965 Permissions, Privileges, and Access Controls vulnerability in Cisco Webex Training Center
The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183.
network
low complexity
cisco CWE-264
5.0