CVE-2014-3304

EUVD-2014-3317
The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID CSCuj81722.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
ciscowebex_meetings_server
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3304
http://www.securityfocus.com/bid/68911
http://www.securitytracker.com/id/1030641
https://exchange.xforce.ibmcloud.com/vulnerabilities/94880
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3304
http://www.securityfocus.com/bid/68911
http://www.securitytracker.com/id/1030641
https://exchange.xforce.ibmcloud.com/vulnerabilities/94880