Medium severity5.0NVD Advisory· Published Nov 30, 2017· Updated Jun 17, 2026
CVE-2017-12297
CVE-2017-12297
Description
A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An attacker could exploit this vulnerability by sending a malicious URL to the Cisco WebEx Meeting Center. An exploit could allow the attacker to connect to arbitrary hosts. Cisco Bug IDs: CSCvf63843.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:cisco:webex_meeting_center:t30:sp7:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:cisco:webex_meeting_center:t30:sp7:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meeting_center:t30:sp8:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meeting_center:t30:sp9:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meeting_center:t31:sp8:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meeting_center:t31:sp9:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meeting_center:t32:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meeting_center:t32.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meeting_center:t32.4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meeting_center:t32.6:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meeting_center:t32.7:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meeting_center:t32.8:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/101985nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1039919nvdThird Party AdvisoryVDB Entry
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-wmcnvdVendor Advisory
News mentions
0No linked articles in our index yet.