CVE-2015-0595

Опубликовано: 02 фев. 2015

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079.

Ссылки

http://secunia.com/advisories/62686
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0595
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37238
Vendor Advisory
http://www.securityfocus.com/bid/72370
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031676
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100667
http://secunia.com/advisories/62686
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0595
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37238
Vendor Advisory
http://www.securityfocus.com/bid/72370
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031676
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100667

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*

Версия до 1.5\(.1.131\) (включая)

EPSS

Процентиль: 69%

0.00607

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-8pq9-x4rm-g7vp

github

больше 3 лет назад