KLA12132 Multiple vulnerabilities in Cisco Jabber

Detect date:

03/23/2021

Severity:

Critical

Description:

Multiple vulnerabilities were found in Cisco Jabber. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information.

Affected products:

Cisco Jabber earlier than 12.1.5
Cisco Jabber 12.5 earlier than 12.5.4
Cisco Jabber 12.6 earlier than 12.6.5
Cisco Jabber 12.7 earlier than 12.7.4
Cisco Jabber 12.8 earlier than 12.8.5
Cisco Jabber 12.9 earlier than 12.9.5

Solution:

Update to the latest version
Download Cisco Jabber

Original advisories:

Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

Impacts:

ACE

Related products:

Cisco Jabber

CVE-IDS:

CVE-2021-14119.9Critical
CVE-2021-14186.5High
CVE-2021-14715.6High
CVE-2021-14176.5High
CVE-2021-14697.2High