Webex Meetings Server
Vendor:
First CVE: May 3, 2013 · Active for 13 years
136
Total CVEs
More Total CVEs than 99% of tracked products
15.1
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 34% of tracked products
0.7%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Webex Meetings Server over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 3, 2013
13 years ago
Most Recent CVE
Dec 10, 2021
1,690 days ago
CVE Severity & Scoring
Webex Meetings Server136 CVEs
47%
46%
All CVEs352,785 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local47 (34.6%)
Network53 (39.0%)
Unknown36 (26.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low98 (72.1%)
High2 (1.5%)
Unknown36 (26.5%)
User Interaction
None28 (20.6%)
Unknown36 (26.5%)
Required72 (52.9%)
Privileges Required
Low16 (11.8%)
High2 (1.5%)
None82 (60.3%)
Unknown36 (26.5%)
Top CVEs
Signals from CVEs in this product scope (136 CVEs).
136 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-44228CRITICAL Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect agai | Dec 10, 2021 | 10.0 | 99 | YES | YES |
CVE-2017-3823HIGH An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class A | Feb 1, 2017 | 8.8 | 48 | NO | YES |
CVE-2020-3361CRITICAL A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site. The | Jun 18, 2020 | 9.8 | 31 | NO | NO |
CVE-2018-0104CRITICAL A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a targete | Jan 4, 2018 | 9.6 | 31 | NO | NO |
CVE-2018-0112CRITICAL A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code | Apr 19, 2018 | 9.0 | 30 | NO | NO |
CVE-2017-12372CRITICAL A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording | Nov 30, 2017 | 9.6 | 30 | NO | NO |
CVE-2017-12368CRITICAL A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording | Nov 30, 2017 | 9.6 | 30 | NO | NO |
CVE-2020-3419CRITICAL A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to join a Webex session without appearing on the participant | Nov 18, 2020 | 9.1 | 29 | NO | NO |
CVE-2016-1448HIGH Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.7 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuy92706. | Jul 17, 2016 | 8.8 | 28 | NO | NO |
CVE-2016-1446HIGH SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuy83200. | Jul 15, 2016 | 8.8 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (136 CVEs).
CISA KEV
1 CVE
0.7% of CVEs· 96th percentile
Metasploit
2 CVEs
1.5% of CVEs· 96th percentile
Nuclei
1 CVE
0.7% of CVEs· 96th percentile
ExploitDB
1 CVE
0.7% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (136 CVEs).
Media Mentions
Signals from CVEs in this product scope (136 CVEs).
Top CNAs Publishing CVEs For Webex Meetings Server
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| t39.3 | 3 | 6.4 | 1.2% | 0 | 0 |
| t31.11.2 | 1 | 9.6 | 2.8% | 0 | 0 |
| t31 | 5 | 7.8 | 1.5% | 0 | 0 |
| t30 | 1 | 9.6 | 2.8% | 0 | 0 |
| t29 | 1 | 9.6 | 2.8% | 0 | 0 |
| 4.0 | 34 | 6.8 | 7.4% | 1 | 1 |
| 3.0mr2 | 13 | 7.8 | 1.5% | 0 | 0 |
| 3.0\(1\) | 2 | 7.8 | 1.1% | 0 | 0 |
| 3.0 | 26 | 7.1 | 16.6% | 1 | 1 |
| 2.8_base | 2 | 8.2 | 4.0% | 0 | 0 |
| 2.8\(1\) | 2 | 7.8 | 1.1% | 0 | 0 |
| 2.8 | 24 | 7.7 | 1.9% | 0 | 0 |
| 2.7_mr2 | 3 | 7.4 | 6.8% | 0 | 1 |
| 2.7_mr1 | 3 | 7.6 | 10.2% | 0 | 1 |
| 2.7_base | 6 | 7.6 | 6.5% | 0 | 1 |
| 2.7.1 | 20 | 7.7 | 2.1% | 0 | 0 |
| 2.7.0 | 1 | 6.5 | 1.7% | 0 | 0 |
| 2.7 | 21 | 7.8 | 2.1% | 0 | 0 |
| 2.6_mr3 | 3 | 7.5 | 8.1% | 0 | 1 |
| 2.6_mr2 | 3 | 7.6 | 10.2% | 0 | 1 |