{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:17:39Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20150623-CVE-2015-4208","slug":"cisco-sa-20150623-cve-2015-4208","vendor":"Cisco","title":"Cisco WebEx Meeting Center GET Parameter Vulnerability","summary":"A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to view sensitive information that is transmitted in GET parameters or perform SQL injection.   The vulnerability is due to the inclusion of sensitive information in the URL as GET parameters. An attacker could exploit this vulnerability by viewing application URL requests containing sensitive information in GET parameters or by injecting SQL commands directly into the URL. Cisco has confirmed the vulnerability and released software updates. A successful exploit of this vulnerability could be leveraged by an attacker to conduct further attacks. Administrators are advised to ensure only trusted users have authorized access to interact with an affected device.","severity":"Medium","published_at":"2015-06-23T14:47:53Z","updated_at":"2015-06-23T14:47:53Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150623-CVE-2015-4208","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20150623-CVE-2015-4208/csaf/Cisco-SA-20150623-CVE-2015-4208.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.02555},"cves":[{"id":"CVE-2015-4208","kev":false,"epss":{"score":0.02555,"percentile":0.83336,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco WebEx Meeting Center","slug":"cisco-webex-meeting-center","vendor":"Cisco"},"cve":{"id":"CVE-2015-4208"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:22:32Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco WebEx Meeting Center","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02555,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2015-06-23T14:47:53Z","updated_at":"2015-06-23T14:47:53Z","advisory_updated_at":"2015-06-23T14:47:53Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150623-CVE-2015-4208","row_display_order":1}]}