Vulnerability Details CVE-2017-12363
A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the welcome message to a meeting. A successful exploit could allow the attacker to modify the welcome message of any known meeting. Cisco Bug IDs: CSCvf68695.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.3%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
- http://www.securityfocus.com/bid/102000
- http://www.securitytracker.com/id/1039921
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex3
- http://www.securityfocus.com/bid/102000
- http://www.securitytracker.com/id/1039921
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex3
Products affected by CVE-2017-12363
-
cpe:2.3:a:cisco:webex_meetings_server:2.6.0.8
-
cpe:2.3:a:cisco:webex_meetings_server:2.7