{"id":"CVE-2009-0614","aliases":["EUVD-2009-0617","GHSA-g7r6-hv8w-2mjr"],"status":"published","title":"Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0...","description":"Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL.","severity":{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02554,"percentile":0.8516,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2009-02-26T16:00:00Z","modified":"2026-06-16T23:05:25Z","products":[{"vendor":"cisco","product":"unified_meetingplace_web_conferencing"}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc86.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33901","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48888","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0614"},{"url":"https://github.com/advisories/GHSA-g7r6-hv8w-2mjr"}],"sources":{"cve":[{"id":"CVE-2009-0614","description":"Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL.","status":"published","published":"2009-02-26T16:00:00Z","modified":"2024-08-07T04:40:05.049Z","updated_at":"2026-11-02T14:33:26.302774Z"}],"euvd":[{"id":"EUVD-2009-0617","description":"Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL.","status":"published","published":"2009-02-26T16:00:00Z","modified":"2024-08-07T04:40:05Z","updated_at":"2026-11-03T01:39:25.189813Z"}],"ghsa":[{"id":"GHSA-g7r6-hv8w-2mjr","title":"Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0...","description":"Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL.","status":"published","published":"2022-05-02T03:16:59Z","modified":"2023-01-31T05:07:57Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:49:18.423365Z"}],"nvd":[{"id":"CVE-2009-0614","description":"Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL.","status":"published","published":"2009-02-26T16:17:20.017Z","modified":"2026-06-16T23:05:25.487Z","cvss":[{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:01:34.44527Z"}]}}