CVE-2016-1482 describes a critical command injection vulnerability in Cisco WebEx Meetings Server version 2.6, allowing remote attackers to execute arbitrary commands by injecting them into application scripts. This vulnerability carries a high CVSSv3 score of 8.1, indicating a severe risk with high confidentiality, integrity, and availability impacts, despite requiring high attack complexity. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the security community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.6.0CPE matchmatch criteria | cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.