PT-2015-7214 · Datatables+1 · Datatables Plugin+1

Published 2015-12-05 · Updated 2020-08-31 · CVE-2015-6384

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings versions prior to 8.5.1 DataTables plugin versions 1.10.8 and earlier

Description The issue allows attackers to bypass intended access restrictions or inject arbitrary web script or HTML. For the DataTables plugin, this can be done via the scripts parameter to the "media/unit testing/templates/6776.php" endpoint.

Recommendations For Cisco WebEx Meetings versions prior to 8.5.1, update to version 8.5.1 or later. For DataTables plugin versions 1.10.8 and earlier, update to a version greater than 1.10.8, such as version 1.10.10.

Fix

XSS

Weakness Enumeration

CWE-264

CWE-79

Related Identifiers

CVE-2015-6384

GHSA-4MV4-GMMF-Q382

Affected Products

Cisco Webex Meetings

Datatables Plugin

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2015-6584 · Security Note
• https://osv.dev/vulnerability/GHSA-4mv4-gmmf-q382 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6384 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151201-wmc · Vendor Advisory
• https://github.com/DataTables/DataTables/issues/602 · Note
• https://github.com/DataTables/DataTables · Note
• https://github.com/DataTables/DataTablesSrc/commit/ccf86dc5982bd8e16d · Note
• https://github.com/DataTables/DataTablesSrc/commits/1.10.10?after=9780a3693572757d87bf70e48bd7555faf974f28+34&branch=1.10.10&qualified_name=refs%2Ftags%2F1.10.10 · Note
• http://securityfocus.com/archive/1/536437/100/0/threaded · Note
• http://seclists.org/fulldisclosure/2015/Sep/37 · Note
• http://packetstormsecurity.com/files/133555/DataTables-1.10.8-Cross-Site-Scripting.html · Note
• https://netsparker.com/cve-2015-6384-xss-vulnerability-identified-in-datatables · Note
• http://securityfocus.com/archive/1/archive/1/536437/100/0/threaded · Note
• https://npmjs.com/advisories/5 · Note