CVE-2016-1447: XSS

Published Jul 15, 2016

Updated

Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuy83194.

Affected Software

2 affected components

Cisco Webex Meetings Server=2.6.0

Cisco Webex Meetings Server=2.6.1.39

Event History

Jul 15, 2016

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-1447?

CVE-2016-1447 is classified as a medium severity vulnerability due to its potential for XSS attacks.

How do I fix CVE-2016-1447?

To fix CVE-2016-1447, you should upgrade to the latest version of Cisco WebEx Meetings Server, which addresses this vulnerability.

What products are affected by CVE-2016-1447?

CVE-2016-1447 affects Cisco WebEx Meetings Server versions 2.6.0 and 2.6.1.39.

What type of attack does CVE-2016-1447 enable?

CVE-2016-1447 enables remote attackers to conduct cross-site scripting (XSS) attacks through the administrator interface.

What are the implications of CVE-2016-1447 for organizations?

Organizations using the affected versions are at risk of having their user's sessions hijacked or malicious scripts executed on their web browsers.