CVE-2014-8034

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-255

Affected software

No affected versions have been published.

Timeline

Published
Jan 15, 2015
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-80355.0The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username existCVE-2014-80365.0The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meetiCVE-2014-80685.0Adobe Digital Editions (DE) 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows remote attackers to obtainCVE-2014-80694.3Multiple cross-site scripting (XSS) vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HCVE-2014-80706.8Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishCVE-2014-80714.3Multiple cross-site scripting (XSS) vulnerabilities in OpenMRS 2.1 Standalone Edition allow remote attackers to inject arbitrary web script CVE-2014-80724.0The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to CVE-2014-80736.8Cross-site request forgery (CSRF) vulnerability in OpenMRS 2.1 Standalone Edition allows remote attackers to hijack the authentication of adCVE-2014-80746.8Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allowsCVE-2014-80753.5Cross-site scripting (XSS) vulnerability in the Tribune module 6.x-1.x and 7.x-3.x for Drupal allows remote authenticated users with certainCVE-2014-80763.5Cross-site scripting (XSS) vulnerability in the Professional theme 7.x before 7.x-2.04 for Drupal allows remote authenticated users with theCVE-2014-80773.5Cross-site scripting (XSS) vulnerability in the NewsFlash theme 6.x-1.x before 6.x-1.7 and 7.x-1.x before 7.x-2.5 for Drupal allows remote a
CVE-2014-8034: Medium severity, CVSS 5.0 | Vulnix