Cisco Collaboration Meeting Rooms vulnerabilities

CVE-2021-1500 [MEDIUM] CWE-601 CVE-2021-1500: A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unaut A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted

CVE-2021-40115 [MEDIUM] CWE-79 CVE-2021-40115: A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user t

CVE-2019-16005 [HIGH] CWE-77 CVE-2019-16005: A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authe A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The vulnerability is due to improper validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerab

CVE-2018-5390 [HIGH] CWE-400 CVE-2018-5390: Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() an Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.