CVE-2015-0634: XSS

Published May 15, 2015

Updated

Cross-site scripting (XSS) vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310.

Affected Software

2 affected components

Cisco Webex Meetings Server=2.5

Cisco Webex Meetings Server=2.5.0.997

Event History

May 15, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0634?

CVE-2015-0634 is classified as a high severity vulnerability due to its potential for remote code execution via XSS attacks.

How do I fix CVE-2015-0634?

To fix CVE-2015-0634, upgrade to a patched version of Cisco WebEx Meetings Server beyond 2.5 and 2.5.0.997.

What systems are affected by CVE-2015-0634?

CVE-2015-0634 affects Cisco WebEx Meetings Server versions 2.5 and 2.5.0.997.

What type of attack does CVE-2015-0634 allow?

CVE-2015-0634 allows remote attackers to inject arbitrary web scripts or HTML via crafted URLs.

Is user interaction required to exploit CVE-2015-0634?

Yes, user interaction is typically required since the attacker needs to trick users into clicking a malicious link to exploit CVE-2015-0634.