CVE-2015-0595

Cisco WebEx Meetings Server < 1.5(1.131) - Exposure of Sensitive Information via XMLAPI GET Request

Title source: llm

Description

The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1031676

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/100667

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=37238

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/72370

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0595

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/62686

Scores

EPSS 0.0185

EPSS Percentile 76.5%

Details

CWE

CWE-200

Status published

Products (1)

cisco/webex_meetings_server < 1.5\(.1.131\)

Published Feb 02, 2015

Tracked Since Feb 18, 2026