Cisco Webex Meetings Online vulnerabilities

CVE-2018-15410 [HIGH] CWE-20 CVE-2018-15410: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webe A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An

CVE-2018-15408 [HIGH] CWE-20 CVE-2018-15408: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webe A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An

CVE-2018-15412 [HIGH] CWE-20 CVE-2018-15412: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webe A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An

CVE-2018-15415 [HIGH] CWE-20 CVE-2018-15415: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webe A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An

CVE-2018-15416 [HIGH] CWE-20 CVE-2018-15416: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webe A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An

CVE-2018-15431 [HIGH] CWE-20 CVE-2018-15431: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webe A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An

CVE-2018-15414 [HIGH] CWE-20 CVE-2018-15414: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webe A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An

CVE-2018-15419 [HIGH] CWE-20 CVE-2018-15419: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webe A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An

CVE-2018-15413 [HIGH] CWE-20 CVE-2018-15413: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webe A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An

CVE-2018-0422 [HIGH] CWE-732 CVE-2018-0422: A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored files and execute code on a targeted device with the privilege level of the user. The vulnerability is due to folder permissions that grant a user the permission to read, write, and execute files in th

CVE-2018-15422 [HIGH] CWE-20 CVE-2018-15422: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webe A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An

CVE-2018-15436 [MEDIUM] CWE-79 CVE-2018-15436: A vulnerability in the web-based management interface of Cisco Webex Events Center, Cisco Webex Meet A vulnerability in the web-based management interface of Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected service. The vul

CVE-2018-0457 [MEDIUM] CWE-399 CVE-2018-0457: A vulnerability in the Cisco Webex Player for Webex Recording Format (WRF) files could allow an unau A vulnerability in the Cisco Webex Player for Webex Recording Format (WRF) files could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. An attacker could exploit this vulnerability by sending a user a link or email attachment with a malicious WRF file and persuading the user to open the file in the Cisco Webex Pl

CVE-2018-0379 [HIGH] CWE-119 CVE-2018-0379: Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Fo Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit these vulnerabilities by providing a user with a malicious .arf or .wrf file via email or URL and convincing the user to launch the file in the Webex recording players. Exploitat

CVE-2018-0380 [MEDIUM] CWE-399 CVE-2018-0380: Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Fo Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit these vulnerabilities by providing a user with a malicious .arf or .wrf file via email or URL and convincing the user to launch the file in the Webex recording players. Exploit

CVE-2018-0287 [HIGH] CWE-20 CVE-2018-0287: A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) file A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability is due to a design flaw in the affected software. An attacker could exploit this vulnerability by sending a user an email attachment or lin

CVE-2018-0288 [MEDIUM] CWE-200 CVE-2018-0288: A vulnerability in Cisco WebEx Recording Format (WRF) Player could allow an unauthenticated, remote A vulnerability in Cisco WebEx Recording Format (WRF) Player could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw in Cisco WRF Player. An attacker could explo