CVE-2014-3303

The web framework in Cisco WebEx Meetings Server does not properly restrict the content of query strings, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81713.

• CWE-200

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3303Vendor Advisory
• http://www.securityfocus.com/bid/68910Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030645Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94893
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3303Vendor Advisory
• http://www.securityfocus.com/bid/68910Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030645Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94893

Published

Jul 28, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3297Cisco Intelligent Automation for Cloud in Cisco Cloud Portal…
• CVE-2014-3298Form Data Viewer in Cisco Intelligent Automation for Cloud i…
• CVE-2014-3299Cisco IOS allows remote authenticated users to cause a denia…
• CVE-2014-3300The BVSMWeb portal in the web framework in Cisco Unified Com…
• CVE-2014-3301The ProfileAction controller in Cisco WebEx Meetings Server …
• CVE-2014-3302user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earl…
• CVE-2014-3304The OutlookAction Class in Cisco WebEx Meetings Server allow…
• CVE-2014-3305Cross-site request forgery (CSRF) vulnerability in the web f…
• CVE-2014-3306The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, …
• CVE-2014-3307The DHCP client implementation in Universal Small Cell firmw…
• CVE-2014-3308Cisco IOS XR on Trident line cards in ASR 9000 devices lacks…
• CVE-2014-3309The NTP implementation in Cisco IOS and IOS XE does not prop…