Vulnerabilities (CVE)

Filtered by vendor Cisco Subscribe
Filtered by product Unified Meetingplace
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-0337 1 Cisco 1 Unified Meetingplace 2012-05-11 6.5 MEDIUM N/A
SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.
CVE-2010-0139 1 Cisco 1 Unified Meetingplace 2011-01-07 9.0 HIGH N/A
Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691.
CVE-2010-0141 1 Cisco 1 Unified Meetingplace 2011-01-07 6.4 MEDIUM N/A
MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935.
CVE-2010-0142 1 Cisco 1 Unified Meetingplace 2010-01-31 8.5 HIGH N/A
MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530.
CVE-2010-0140 1 Cisco 1 Unified Meetingplace 2010-01-31 10.0 HIGH N/A
Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) administrator accounts via a crafted URL in a request to the internal interface, aka Bug IDs CSCtc59231 and CSCtd40661.