Where
-Infinity
0

Trending

Last week
Last month
Last year

Cisco QuadXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Cisco WebEx Social (formerly Cisco Quad) allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977.

First published (updated )
CVE-2012-6397

Cisco Webex SocialInput Validation

Risk 21
Severity
4
Input Validation
AV:N/AC:L/Au:S/C:N/I:P/A:N

The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID CSCue67190.

First published (updated )
CVE-2013-1245

Cisco Webex SocialCSRF

Risk 22
Severity
4.3
CSRF
AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405 and CSCuh10355.

First published (updated )
CVE-2013-3392

Cisco Webex SocialInfoleak

Risk 21
Severity
4
Infoleak
AV:N/AC:L/Au:S/C:P/I:N/A:N

The search function in Cisco Webex Social (formerly Cisco Quad) allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235.

First published (updated )
CVE-2013-1107

Cisco Webex SocialXSS

Risk 18
Severity
3.5
XSS
AV:N/AC:M/Au:S/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in the portal module in Cisco WebEx Social allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL in the link field in a post, aka Bug ID CSCue67199.

First published (updated )
CVE-2013-1244

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203