CVEvulnerability
CVE-2016-1447
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-07-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuy83194.
Affected configurations
• cisco webex meetings server 2.6.0
• cisco webex meetings server 2.6.1.39
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-wms1 Vendor Advisory
- http://www.securityfocus.com/bid/91781 www.securityfocus.com
- http://www.securitytracker.com/id/1036314 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-wms1 Vendor Advisory
- http://www.securityfocus.com/bid/91781 www.securityfocus.com
- http://www.securitytracker.com/id/1036314 www.securitytracker.com