Known vulnerabilities in Cisco WebEx Meetings Server - page 2

Vendor: Cisco Systems, Inc
Software: Cisco WebEx Meetings Server
Software CPE: cpe:2.3:a:cisco_systems:cisco_webex_meetings_server:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 48
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco WebEx Meetings Server Cisco WebEx Meetings Server is affected by 48 known vulnerabilities: 11 high, 9 medium, 28 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU19994 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-1954		 CWE-601 Low
No
No
 4.0MR1 08.08.2019 SB2019080827
#VU17189 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1655		 CWE-79 Low
No
No
 - 23.01.2019 SB2019012407
#VU15811 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-18895		 CWE-611 Low
No
No
 2.8MR3, 3.0MR2 patch 1 12.11.2018 SB2018111302
#VU14676 - Permissions, Privileges, and Access Controls
CVE-2018-0422		 CWE-264 Low
No
No
 3.0MR2 05.09.2018 SB2018090614
#VU14677 - Cross-Site Request Forgery (CSRF)
CVE-2018-0439		 CWE-352 Low
No
No
 - 05.09.2018 SB2018090615
#VU13950 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0390		 CWE-79 Low
No
No
 - 18.07.2018 SB2018072013
#VU13203 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0356		 CWE-79 Low
No
No
 - 07.06.2018 SB2018060701
#VU13202 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0357		 CWE-79 Low
No
No
 - 06.06.2018 SB2018060701
#VU12057 - Improper input validation
CVE-2018-0112		 CWE-20 High
No
No
 - 20.04.2018 SB2018042410
#VU10101 - Improper Access Control
CVE-2018-0110		 CWE-284 Low
No
No
 - 18.01.2018 SB2018011811
#VU10100 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-0108		 CWE-611 Low
No
No
 - 18.01.2018 SB2018011811
#VU10099 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0109		 CWE-200 Low
No
No
 - 18.01.2018 SB2018011811
#VU10098 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0111		 CWE-200 Low
No
No
 - 17.01.2018 SB2018011811
#VU9495 - Permissions, Privileges, and Access Controls
CVE-2017-12363		 CWE-264 Low
No
No
 - 01.12.2017 SB2017120105
SB2024072423
#VU9100 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12294		 CWE-79 Low
No
No
 - 02.11.2017 SB2017110216
#VU9099 - Exposure of sensitive information to an unauthorized actor
CVE-2017-12295		 CWE-200 Low
No
No
 - 02.11.2017 SB2017110216
#VU8884 - Resource exhaustion
CVE-2017-12293		 CWE-400 Low
No
No
 - 19.10.2017 SB2017101911
#VU8883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12296		 CWE-79 Low
No
No
 - 18.10.2017 SB2017101911
#VU8691 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12257		 CWE-79 Low
No
No
 - 04.10.2017 SB2017100406
#VU6518 - Exposure of sensitive information to an unauthorized actor
CVE-2017-6651		 CWE-200 Low
No
No
 - 11.05.2017 SB2017051105


Showing elements 21 - 40 out of 48