CVE-2015-4276

Published: Jul 16, 2015Modified: May 6, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138.

Affected (1)

Products: Cisco: Webex Meetings Server

Cisco

1 product

Webex Meetings Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Webex Meetings Server	Version 2.5(1)

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://tools.cisco.com/security/center/viewAlert.x?alertId=39938

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/75917

Source: psirt@cisco.com

http://www.securitytracker.com/id/1032963

Source: psirt@cisco.com

http://tools.cisco.com/security/center/viewAlert.x?alertId=39938

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/75917

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1032963

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.