Priority CRITICAL 100KEV
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-10 · Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority MEDIUM 60
An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class ActiveX control plugin before 10031.6.201…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.27231 · Published 2017-02-01 · No fix listed CWE-119
Priority MEDIUM 49
A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a targeted user.
CVSS 3.0CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.03774 · Published 2018-01-04 · No fix listed CWE-20
Priority MEDIUM 47
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02423 · Published 2020-06-18 · No fix listed CWE-287
Priority MEDIUM 47
A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files.
CVSS 3.0CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.0298 · Published 2017-11-30 · No fix listed CWE-119
Priority MEDIUM 47
A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files.
CVSS 3.0CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.0298 · Published 2017-11-30 · No fix listed CWE-119
Priority MEDIUM 47
A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.05951 · Published 2017-07-25 · No fix listed CWE-119
Priority MEDIUM 46
A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system.
CVSS 3.0CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.02596 · Published 2018-04-19 · No fix listed CWE-20
Priority MEDIUM 46
A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files.
CVSS 3.0CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02829 · Published 2017-11-30 · No fix listed CWE-119
Priority MEDIUM 45
The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460.
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03439 · Published 2015-02-07 · No fix listed CWE-20
Priority MEDIUM 43
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to join a Webex session without appearing on the participant list.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02151 · Published 2020-11-18 · No fix listed CWE-913
Priority MEDIUM 43
A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to access sensitive system information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02076 · Published 2019-06-05 · Fixed in 2.6 CWE-16
Priority MEDIUM 42
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.02297 · Published 2017-10-19 · No fix listed CWE-119
Priority MEDIUM 42
Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.04032 · Published 2016-09-17 · No fix listed CWE-78
Priority MEDIUM 42
SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuy83200.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01786 · Published 2016-07-15 · No fix listed CWE-89
Priority MEDIUM 41
Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02637 · Published 2020-11-06 · No fix listed CWE-119
Priority MEDIUM 41
Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02772 · Published 2020-11-06 · No fix listed CWE-119
Priority MEDIUM 41
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02361 · Published 2020-03-04 · No fix listed CWE-20
Priority MEDIUM 40
A vulnerability in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01955 · Published 2020-04-15 · No fix listed CWE-119
Priority MEDIUM 40
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01929 · Published 2020-03-04 · No fix listed CWE-20
Priority MEDIUM 40
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01812 · Published 2020-09-23 · No fix listed CWE-119
Priority MEDIUM 40
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01812 · Published 2020-09-23 · No fix listed CWE-119
Priority MEDIUM 40
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01812 · Published 2020-09-23 · No fix listed CWE-119
Priority MEDIUM 40
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02015 · Published 2018-10-05 · No fix listed CWE-20
Priority MEDIUM 40
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02015 · Published 2018-10-05 · No fix listed CWE-20
Load more