GCVE - cpe:2.3:a:cisco:meeting_server:1.8.15:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:meeting_server:1.8.15:*:*:*:*:*:*:*

part: a version: 1.8.15 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Meeting Server (`2c523118-4248-5455-b66b-d1d2c54f98c7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-6448`	vulnerable	2026-06-08 05:08:02.468981	Details available A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to Release 2.0.3, Acano Server releases 1.9.x prior to Release 1.9.5, Acano Server releases 1.8.x prior to Release 1.8.17. More Information: CSCva76004. Known Affected Releases: 1.8.x 1.92.0. Published: 2016-11-03T21:00:00.000Z Updated: 2024-08-06T01:29:20.048Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-cms1 http://www.securitytracker.com/id/1037181 http://www.securityfocus.com/bid/94076	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6446`	vulnerable	2026-06-08 05:08:02.462563	Details available A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0. Published: 2016-10-27T21:00:00.000Z Updated: 2024-08-06T01:29:20.110Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/93782 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-cms1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6445`	vulnerable	2026-06-08 05:08:02.461982	Details available A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user. This vulnerability is due to the XMPP service incorrectly processing a deprecated authentication scheme. A successful exploit could allow an attacker to access the system as another user. Published: 2016-10-27T21:00:00.000Z Updated: 2024-08-06T01:29:20.015Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-msc http://www.securitytracker.com/id/1037000 http://www.securityfocus.com/bid/93517	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6444`	vulnerable	2026-06-08 05:08:02.455701	Details available A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a Web Bridge user. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0. Published: 2016-10-27T21:00:00.000Z Updated: 2024-08-06T01:29:20.058Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/93785 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-cms	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.