CVE-2014-3305

Cisco WebEx Meetings Server < 1.5(1.131) - Cross-Site Request Forgery

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuj81735.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/94894

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/68903

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=35051

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3305

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030644

Scores

EPSS 0.0127

EPSS Percentile 66.3%

Details

CWE

CWE-352

Status published

Products (3)

cisco/webex_meetings_server 1.5

cisco/webex_meetings_server 1.5\(.1.6\)

cisco/webex_meetings_server < 1.5\(.1.131\)

Published Jul 26, 2014

Tracked Since Feb 18, 2026