← Vulnerability feed

Vulnerability record · CVE-2012-6399 · published 27 May 2013

CVE-2012-6399: Cisco webex improper input validation vulnerability

Cisco · Webex

Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, aka Bug ID CSCud94176.

5.8 CVSS 2.0 Medium EPSS 0.53% · top 57.7% CWE-20 · Improper input validation
5.8CVSS 2.0 base score
0.53%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, aka Bug ID CSCud94176.

AV:N/AC:M/Au:N/C:P/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/51412 Vendor Advisory
http://secunia.com/advisories/51412 Vendor Advisory

Track CVE-2012-6399 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2009-2875Cisco webex memory buffer overflow vulnerabilityBuffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for Windows, 26.x before 26.49.35 f…EPSS 5.1%9.3CVE-2009-2876Cisco webex memory buffer overflow vulnerabilityHeap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T…EPSS 5.1%9.3CVE-2009-2877Cisco webex memory buffer overflow vulnerabilityStack-based buffer overflow in ataudio.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x (aka T27SP10) for Wind…EPSS 5.1%9.3CVE-2009-2878Cisco webex memory buffer overflow vulnerabilityHeap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T…EPSS 5.1%9.3CVE-2009-2879Cisco webex memory buffer overflow vulnerabilityHeap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T…EPSS 5.1%9.3CVE-2009-2880Cisco webex memory buffer overflow vulnerabilityBuffer overflow in atrpui.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for Windows, 26.x before 26.49.35 f…EPSS 5.2%8.8CVE-2017-3823Cisco activetouch general plugin container memory buffer overflow vulnerabilityAn issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Fi…EPSS 27%6.1CVE-2026-20149Cisco webex cross-site scripting vulnerabilityA vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addre…EPSS 0.24%

Source: NIST National Vulnerability Database (record CVE-2012-6399), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.