CVE-2015-4208

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398.

• CWE-89
• CWE-200

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39458Vendor Advisory
• http://www.securityfocus.com/bid/75361Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032705Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39458Vendor Advisory
• http://www.securityfocus.com/bid/75361Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032705Third Party Advisory, VDB Entry

Published

Jun 24, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4202Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination…
• CVE-2015-4203Race condition in Cisco IOS 12.2SCH in the Performance Routi…
• CVE-2015-4204Memory leak in Cisco IOS 12.2 in the Performance Routing Eng…
• CVE-2015-4205Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attacke…
• CVE-2015-4206Cisco Unified Communications Manager (UCM) 8.0 through 8.6 a…
• CVE-2015-4207Cisco WebEx Meeting Center places a meeting's access number …
• CVE-2015-4209Cisco WebEx Meeting Center does not properly determine autho…
• CVE-2015-4210Cross-site scripting (XSS) vulnerability in Cisco WebEx Meet…
• CVE-2015-4211Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows d…
• CVE-2015-4212Cisco WebEx Meeting Center allows remote attackers to obtain…
• CVE-2015-4213Cisco NX-OS 1.1(1g) on Nexus 9000 devices allows remote auth…
• CVE-2015-4214Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remo…