CVE-2010-0140: Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotf...

Security readout for executives and security teams

This CVE concerns Cisco Unified MeetingPlace web server flaws that could let a remote attacker create new user or administrator accounts through the internal interface. That is a serious access-control failure, especially if the internal interface is reachable by untrusted users. Exposure is most likely in legacy Cisco Unified MeetingPlace deployments that still run the affected versions and expose the internal interface beyond tightly controlled administrative networks. Prioritize this if Cisco Unified MeetingPlace remains in use. Administrator account creation can lead to major compromise, but urgency depends on whether affected legacy versions exist and whether the internal interface is reachable. Mitigation focus: Upgrade MeetingPlace 7 to 7.0(2.3) hotfix 5F or later guidance from Cisco.; Upgrade MeetingPlace 6 to 6.0.639.3 or later guidance from Cisco.; If running MeetingPlace 5, check Cisco guidance because affected status is described as possible..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.