Vulnerabilities > Cisco > Webex Training Center
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2013-12-14 | CVE-2013-6963 | Cross-Site Scripting vulnerability in Cisco Webex Training Center Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36207. | 4.3 |
| 2013-12-14 | CVE-2013-6710 | Cross-Site Request Forgery (CSRF) vulnerability in Cisco Webex Training Center Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCul25567. | 6.8 |
| 2013-12-14 | CVE-2013-6709 | Information Exposure vulnerability in Cisco Webex Training Center The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111. | 5.0 |
| 2013-01-21 | CVE-2013-1110 | Permissions, Privileges, and Access Controls vulnerability in Cisco Webex Training Center Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and (1) enable or (2) disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065. | 4.0 |
| 2013-01-21 | CVE-2013-1108 | Permissions, Privileges, and Access Controls vulnerability in Cisco Webex Training Center Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL, aka Bug ID CSCzu81064. | 4.0 |
| 2013-01-17 | CVE-2013-1109 | Cross-Site Request Forgery (CSRF) vulnerability in Cisco Webex Training Center Cross-site request forgery (CSRF) vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for requests that delete tests, aka Bug ID CSCzu81067. | 6.8 |