A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the…

Description

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw in Cisco WebEx Meetings Server, which could include internal network information that should be restricted. An attacker could exploit the vulnerability by utilizing available resources to study the customer network. An exploit could allow the attacker to discover sensitive data about the application. Cisco Bug IDs: CSCvg46806.

Scores

EPSS (exploitation in 30 days)

1.7% · top 22% of all CVEs (4 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: yes · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.

Weakness

• CWE-200 (opens in a new tab)All about CWE-200 and its CVEs

Affected products

• Cisco WebEx Meetings Server

  • affected Cisco WebEx Meetings Server

References (3)

• 102723 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 1040237 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-wms3 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2018-0111](https://trackcve.app/badge/CVE-2018-0111.svg)](https://trackcve.app/cve/CVE-2018-0111)

Record last updated 2 Dec 2024, 21:31 UTC.