Webex Training Center CVE-2013-6969

MEDIUM

Improper Input Validation (CWE-20)

2013-12-14 psirt@cisco.com

Information Disclosure Cisco Webex Training Center

4.3

CVSS 2.0 · NVD

Share

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:P/A:N

Attack Vector

Network

Attack Complexity

M

Confidentiality

None

Integrity

P

Availability

None

Lifecycle Timeline

1

CVE Published

Dec 14, 2013 - 22:55 cve.org

MEDIUM 4.3

DescriptionCVE.org

The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990.

AnalysisAI

The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990. Affected products include: Cisco Webex Training Center.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Webex Training Center

View all

CVE-2017-6753 HIGH Act Now

A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated,

CVE-2013-6710 MEDIUM This Month

Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the aut

CVE-2013-1109 MEDIUM This Month

Cross-site request forgery (CSRF) vulnerability in testingLibraryAction.do in the Training Center testing library in Cis

CVE-2013-6966 MEDIUM This Month

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web si

CVE-2013-6971 MEDIUM This Month

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web si

CVE-2019-15987 MEDIUM This Month

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center

CVE-2013-6972 MEDIUM This Month

Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conf

CVE-2013-6968 MEDIUM This Month

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail

CVE-2013-6965 MEDIUM This Month

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation i

CVE-2014-2199 MEDIUM This Month

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meeti

CVE-2013-6709 MEDIUM This Month

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed,

CVE-2013-6973 MEDIUM This Month

Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul5712

Same weakness CWE-20 – Improper Input Validation

View all

CVE-2021-44228 CRITICAL POC

CVE-2024-3400 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2023-22515 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2017-9791 CRITICAL POC

CVE-2017-15944 CRITICAL POC

CVE-2019-0604 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2013-6969 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy