Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior
Críticas / altas1294▼ 196 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
339 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5) | 1.8% | — | Cisco Webex Training Center | 14/12/2013 | 17/6/2026 | The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183. | |
| Modificada | Baja (3.5) | 1.6% | — | Cisco Webex Meeting Center | 14/12/2013 | 17/6/2026 | Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors, aka Bug ID CSCul36197. | |
| Modificada | Media (4.3) | 2.1% | — | Cisco Webex Training Center | 14/12/2013 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36207. | |
| Modificada | Media (4.3) | 1.8% | — | Cisco Webex Meeting Center | 14/12/2013 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36228. | |
| Modificada | Media (4.3) | 1.8% | — | Cisco Webex Meeting Center | 14/12/2013 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36237. | |
| Modificada | Media (4.3) | 2.0% | — | Cisco Webex Meeting Center | 14/12/2013 | 17/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36248. | |
| Modificada | Media (5.8) | 2.1% | — | Cisco Webex Sales Center | 14/12/2013 | 17/6/2026 | Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557. | |
| Modificada | Media (4.3) | 2.1% | — | Cisco Webex Sales Center | 14/12/2013 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540. | |
| Modificada | Media (6.8) | 1.2% | — | Cisco Webex Training Center | 14/12/2013 | 17/6/2026 | Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCul25567. | |
| Modificada | Media (5) | 1.7% | — | Cisco Webex Training Center | 14/12/2013 | 17/6/2026 | The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111. | |
| Modificada | Media (6.8) | 1.2% | — | Cisco Webex Meetings Server | 16/10/2013 | 16/6/2026 | The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allows remote attackers to launch a deployment or cause a denial of service (deployment interruption) via a direct request, aka Bug ID CSCuf52200. | |
| Modificada | Alta (9.3) | 3.1% | — | Cisco Webex Recording Format Player | 6/9/2013 | 16/6/2026 | Buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DHT index value in JPEG data within a WRF file, aka Bug ID… | |
| Modificada | Alta (9.3) | 3.2% | — | Cisco Webex Recording Format Player | 6/9/2013 | 16/6/2026 | Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCuc27645. | |
| Modificada | Alta (9.3) | 3.1% | — | Cisco Webex Recording Format Player | 6/9/2013 | 16/6/2026 | Buffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCuc27639. | |
| Modificada | Alta (9.3) | 3.1% | — | Cisco Webex Advanced Recording Format Player | 6/9/2013 | 16/6/2026 | Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted ARF file, aka Bug IDs CSCue74147 and CSCub28383. | |
| Modificada | Alta (9.3) | 3.1% | — | Cisco Webex Advanced Recording Format Player | 6/9/2013 | 16/6/2026 | Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ARF file, aka Bug IDs CSCue74118, CSCub28371, CSCud23401,… | |
| Modificada | Media (4) | 1.3% | — | Cisco Webex Meetings Server | 2/8/2013 | 16/6/2026 | Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended access restrictions by performing meeting operations after account deactivation, aka Bug ID CSCuh33315. | |
| Modificada | Media (4) | 1.1% | — | Cisco Webex | 31/7/2013 | 16/6/2026 | The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965. | |
| Modificada | Media (4.3) | 0.48% | — | Cisco Webex Social | 21/6/2013 | 16/6/2026 | Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405 and CSCuh10355. | |
| Modificada | Media (4.3) | 1.8% | — | Cisco Webex Meetings Server | 6/6/2013 | 16/6/2026 | The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485. | |
| Modificada | Media (5.8) | 0.53% | — | Cisco Webex | 27/5/2013 | 16/6/2026 | Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, aka Bug ID CSCud94176. | |
| Modificada | Media (4) | 1.00% | — | Cisco Webex Social | 16/5/2013 | 16/6/2026 | The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID CSCue67190. | |
| Modificada | Baja (3.5) | 0.77% | — | Cisco Webex Social | 16/5/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the portal module in Cisco WebEx Social allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL in the link field in a post, aka Bug ID CSCue67199. | |
| Modificada | Media (5) | 1.2% | — | Cisco Webex Meetings ServerCisco Webex Node FOR ASR 1000 SeriesCisco Webex Node FOR MCS | 4/5/2013 | 16/6/2026 | The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252. | |
| Modificada | Media (5) | 1.2% | — | Cisco Webex Meetings ServerCisco Webex Node FOR MCS | 3/5/2013 | 16/6/2026 | The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629. |