CVE-2017-3811

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc39165. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.2054.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-611

Affected software

Vendor	Product	Versions
n/a	Cisco WebEx Meetings Server	Cisco WebEx Meetings Server

References

http://www.securityfocus.com/bid/96912Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038042
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wmsVendor Advisory
http://www.securityfocus.com/bid/96912Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038042
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wmsVendor Advisory

Timeline

Published: Mar 17, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-38126.8A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches co CVE-2017-38137.8A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows could allow an unauth CVE-2017-38145.8A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's abi CVE-2017-38155.3An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePr CVE-2017-38174.3A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authentica CVE-2017-38185.8A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (E CVE-2017-38198.8A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 CVE-2017-38206.5A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco I CVE-2017-38216.1A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduc CVE-2017-38225.3A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthent CVE-2017-38238.8An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on M CVE-2017-38246.8A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attac