Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87397
HistoryOct 11, 2022 - 12:00 a.m.

Cisco Jabber Input Validation Error Vulnerability

2022-10-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
344
cisco jabber
input validation
version 14.1.3
xmpp messages
remote attacker
authenticated

EPSS

0.001

Percentile

30.4%

Cisco Jabber is a unified communications client solution from Cisco. An input validation error vulnerability exists in Cisco Jabber Client Software versions prior to 14.1.3, which stems from improper handling of nested XMPP messages in requests sent to Cisco Jabber Client Software, and could be exploited by an authenticated remote attacker to manipulate the content of XMPP messages used by the affected application .

EPSS

0.001

Percentile

30.4%