CVE-2014-3304

The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID CSCuj81722.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
VendorProductVersion
ciscowebex_meetings_server
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3304
http://www.securityfocus.com/bid/68911
http://www.securitytracker.com/id/1030641
https://exchange.xforce.ibmcloud.com/vulnerabilities/94880
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3304
http://www.securityfocus.com/bid/68911
http://www.securitytracker.com/id/1030641
https://exchange.xforce.ibmcloud.com/vulnerabilities/94880