CVE-2016-1410

High

Published: 28/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by (1) attending or (2) hosting a meeting.

Risk Assessment

Attackers may exploit this vulnerability to determine which usernames are valid, potentially leading to further attacks on the system.

Recommendation

It is recommended to update Cisco WebEx Meeting Center to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Cisco WebEx Meeting Center

CVE-2015-4208High
Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, allowing remote attackers to obtain sensitive information or conduct SQL injection attacks.

Original NVD description (English source)

Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by (1) attending or (2) hosting a meeting, aka Bug ID CSCux84312.