CVE-2017-12365

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-30 · updated 2026-06-17
Weakness: CWE-200

Description

A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would show both listed and unlisted meetings in the displayed information. An attacker could use this information to attend meetings that are not available for their attendance. Cisco Bug IDs: CSCvg33629.

Affected products

Cisco WebEx Meeting Center: t32.6

References

http://www.securityfocus.com/bid/101999
http://www.securitytracker.com/id/1039920
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex4
http://www.securityfocus.com/bid/101999
http://www.securitytracker.com/id/1039920
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex4

Get alerted when CVE-2017-12365 or the next vulnerability affects your stack