Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCus97452.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Unified MeetingPlace web-based用户界面信息泄露漏洞
Vulnerability Description
Cisco Unified MeetingPlace是美国思科(Cisco)公司的一套多媒体会议解决方案。该方案提供了将语音、视频和Web会议集成在一起的用户环境。 Cisco Unified MeetingPlace 8.6(1.9)版本的web-based用户界面中存在安全漏洞。远程攻击者可借助带有外部实体声明和实体引用的XML文档利用该漏洞读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A