Total
25 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2012-0337 | 1 Cisco | 1 Unified Meetingplace | 2012-05-10 | 6.5 MEDIUM | N/A |
SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939. | |||||
CVE-2010-0141 | 1 Cisco | 1 Unified Meetingplace | 2011-01-06 | 6.4 MEDIUM | N/A |
MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935. | |||||
CVE-2010-0139 | 1 Cisco | 1 Unified Meetingplace | 2011-01-06 | 9.0 HIGH | N/A |
Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691. | |||||
CVE-2010-0142 | 1 Cisco | 1 Unified Meetingplace | 2010-01-30 | 8.5 HIGH | N/A |
MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530. | |||||
CVE-2010-0140 | 1 Cisco | 1 Unified Meetingplace | 2010-01-30 | 10.0 HIGH | N/A |
Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) administrator accounts via a crafted URL in a request to the internal interface, aka Bug IDs CSCtc59231 and CSCtd40661. |