CVE-2014-3286

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-08 · updated 2026-06-17
Weakness: CWE-264

Description

The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661.

Affected products

Cisco WebEx Meetings Server: all versions

References

http://secunia.com/advisories/58571
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3286
http://www.securityfocus.com/bid/67922
http://secunia.com/advisories/58571
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3286
http://www.securityfocus.com/bid/67922

Get alerted when CVE-2014-3286 or the next vulnerability affects your stack