{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:17:08Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20150513-CVE-2015-0634","slug":"cisco-sa-20150513-cve-2015-0634","vendor":"Cisco","title":"Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability ","summary":"A vulnerability within the administrative interface of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input submitted to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by convincing a user to follow a malicious link or attacker-controlled web page. A successful exploit could allow an attacker to execute arbitrary script or HTML code on the user's browser within the context of the affected site. Cisco has confirmed the vulnerability and software updates are available. To exploit the vulnerability, the attacker may provide a link that directs a user to a malicious website and use misleading language or instructions to persuade the user to follow the link.","severity":"Medium","published_at":"2015-05-13T19:16:02Z","updated_at":"2015-05-13T19:16:02Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150513-CVE-2015-0634","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20150513-CVE-2015-0634/csaf/Cisco-SA-20150513-CVE-2015-0634.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.02162},"cves":[{"id":"CVE-2015-0634","kev":false,"epss":{"score":0.02162,"percentile":0.80215,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco WebEx Meeting Center","slug":"cisco-webex-meeting-center","vendor":"Cisco"},"cve":{"id":"CVE-2015-0634"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:22:38Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco WebEx Meeting Center","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02162,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2015-05-13T19:16:02Z","updated_at":"2015-05-13T19:16:02Z","advisory_updated_at":"2015-05-13T19:16:02Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150513-CVE-2015-0634","row_display_order":1}]}