CVE-2013-6965

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Dec 14, 2013
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-69665.8Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phisCVE-2013-69675.8Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitraCVE-2013-69685.0Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, whicCVE-2013-69694.3The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka CVE-2013-69705.0Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responsesCVE-2013-69715.8Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phisCVE-2013-69725.0Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, bCVE-2013-69734.3Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121.CVE-2013-69744.3Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject CVE-2013-69754.6Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary fileCVE-2013-69766.8Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers to hijack the authentCVE-2013-69784.0The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated us
CVE-2013-6965: Medium severity, CVSS 5.0 | Vulnix