CVE-2015-4208
HighSummary
Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, allowing remote attackers to obtain sensitive information or conduct SQL injection attacks.
Risk Assessment
Attackers may exploit this vulnerability to gain access to sensitive data or perform database attacks, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update Cisco WebEx Meeting Center to the latest version to patch this vulnerability and implement additional security measures to restrict access to sensitive data.
Other vulnerabilities in Cisco WebEx Meeting Center
Original NVD description (English source)
Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398.