Unscored CVE-2014-8036 EUVD-2014-7885GHSA-pxc3-xwhv-5qph

The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meet…

Published Jan 10, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invite list via a crafted URL, aka Bug ID CSCuj40254.

References

71982 vdb-entry
cisco-webex-cve20148036-sec-bypass(100571) vdb-entry
20150109 Cisco WebEx Meetings Server Unauthorized Invite List Vulnerability vendor-advisory
60330 third-party-advisory