CVE-2017-12297

A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An attacker could exploit this vulnerability by sending a malicious URL to the Cisco WebEx Meeting Center. An exploit could allow the attacker to connect to arbitrary hosts. Cisco Bug IDs: CSCvf63843.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/101985Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039919Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-wmcVendor Advisory
• http://www.securityfocus.com/bid/101985Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039919Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-wmcVendor Advisory

Published

Nov 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12291Multiple vulnerabilities in the web interface of the Cisco R…
• CVE-2017-12292Multiple vulnerabilities in the web interface of the Cisco R…
• CVE-2017-12293A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2017-12294A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2017-12295A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2017-12296A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2017-12298A vulnerability in Cisco WebEx Meeting Center could allow an…
• CVE-2017-12299A vulnerability exists in the process of creating default IP…
• CVE-2017-1230IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5…
• CVE-2017-12300A vulnerability in the SNORT detection engine of Cisco Firep…
• CVE-2017-12301A vulnerability in the Python scripting subsystem of Cisco N…
• CVE-2017-12302A vulnerability in the Cisco Unified Communications Manager …