CVE-2014-2199

CWE-200 — Information Exposure3 documents3 sources
Severity
5.0MEDIUM
EPSS
0.4%
top 40.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Webex Meetings ServerCisco Webex Business Suite
Timeline
PublishedMay 20
Latest updateMay 17

Description

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDcisco/webex_meetings_server1.5\(.1.131\)
▶NVDcisco/webex_business_suite27.0, 28.0, 29.0+2

🔴Vulnerability Details

2
GHSA
GHSA-4fmq-9536-6mrc: meetinginfo↗2022-05-17
▶
CVEList
CVE-2014-2199: meetinginfo↗2014-05-20
▶
CVE-2014-2199 (MEDIUM CVSS 5) | meetinginfo.do in Cisco WebEx Event | cvebase.io