CVE-2015-0595 — Sensitive Information Exposure in Cisco Webex Meetings Server

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.6%
top 30.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Webex Meetings Server
Timeline
PublishedFeb 2
Latest updateMay 17

Description

The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDcisco/webex_meetings_server1.5\(.1.131\)

🔴Vulnerability Details

2
GHSA
GHSA-8pq9-x4rm-g7vp: The XMLAPI in Cisco WebEx Meetings Server 1↗2022-05-17
▶
CVEList
CVE-2015-0595: The XMLAPI in Cisco WebEx Meetings Server 1↗2015-02-02
▶

📋Vendor Advisories

1
Cisco
Cisco WebEx Meetings Server XMLAPI Vulnerability↗2015-01-30
▶
CVE-2015-0595 — Sensitive Information Exposure in Cisco | cvebase