What’s Vulnerable › Vulnerabilities

CVE-2014-3296

• Severity: medium (CVSS 4.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-06-21 · updated 2026-06-17
• Weakness: CWE-200

Description

The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain sensitive meeting information via a crafted URL, aka Bug ID CSCum03527.

Affected products

• Cisco WebEx Meetings Server: through 1.5\(.1.131\); 1.5(.1.6)

References

• http://secunia.com/advisories/59263
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3296
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34663
• http://www.securityfocus.com/bid/68118
• http://secunia.com/advisories/59263
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3296
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34663
• http://www.securityfocus.com/bid/68118

Get alerted when CVE-2014-3296 or the next vulnerability affects your stack