Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

136 records in Webex Meetings Server · all components

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority MEDIUM 60

An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class ActiveX control plugin before 10031.6.201…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.27231 Published 2017-02-01 No fix listed CWE-119
Priority MEDIUM 49

A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a targeted user.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.03774 Published 2018-01-04 No fix listed CWE-20
Priority MEDIUM 47

A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.05951 Published 2017-07-25 No fix listed CWE-119
Priority MEDIUM 46

A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system.

CVSS 3.0CRITICAL 9.0 Network Low privileges User interaction EPSS 0.02596 Published 2018-04-19 No fix listed CWE-20
Priority MEDIUM 43

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to join a Webex session without appearing on the participant list.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02151 Published 2020-11-18 No fix listed CWE-913
Priority MEDIUM 43

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to access sensitive system information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02076 Published 2019-06-05 Fixed in 2.6 CWE-16
Priority MEDIUM 42

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.02297 Published 2017-10-19 No fix listed CWE-119
Priority MEDIUM 40

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02015 Published 2018-10-05 No fix listed CWE-20
Priority MEDIUM 40

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02015 Published 2018-10-05 No fix listed CWE-20
Load more
Open these records in search →