CVEvulnerability
CVE-2014-3304
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID CSCuj81722.
Affected configurations
• cisco webex meetings server
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3304 Vendor Advisory
- http://www.securityfocus.com/bid/68911 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030641 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94880 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3304 Vendor Advisory
- http://www.securityfocus.com/bid/68911 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030641 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94880 exchange.xforce.ibmcloud.com