CVE-2015-0589

Cisco WebEx Meetings Server 1.0-1.5 - Authenticated Remote Code Execution via Administrative Web Interface

Title source: llm

Description

The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1031692

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/100719

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150204-wbx

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/72493

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/62799

Scores

EPSS 0.0344

EPSS Percentile 87.6%

Details

CWE

CWE-20

Status published

Products (3)

cisco/webex_meetings_server 1.0

cisco/webex_meetings_server 1.1

cisco/webex_meetings_server 1.5

Published Feb 07, 2015

Tracked Since Feb 18, 2026