48 matches found
CVE-2016-1311
Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...
CVE-2016-1311: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...
PT-2016-4701
Name of the Vulnerable Software and Affected Versions Cisco Jabber Guest Server version 10.68 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via the host tag parameter. Recommendations For Cisco...
Cisco Jabber Guest Server HTML5 Information Disclosure Vulnerability
A vulnerability in the underlying application programming interface API of the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to access sensitive system information from the affected system. The vulnerability is due to insufficient validation of specific values passed v...
CVE-2014-8026
Cross-site scripting XSS vulnerability in the Guest Server in Cisco Jabber allows remote attackers to inject arbitrary web script or HTML via a 1 GET or 2 POST parameter, aka Bug ID CSCus08074...
CVE-2014-8024
The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP 1 GET or 2 POST request, aka Bug ID CSCus19789...
Design/Logic Flaw
The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP 1 GET or 2 POST response, aka Bug ID CSCus19801...
Design/Logic Flaw
The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP 1 GET or 2 POST request, aka Bug ID CSCus19789...
CVE-2014-8024
CVE-2014-8024 affects Cisco Jabber Guest Server: the API vulnerable due to insufficient validation of values passed via HTTP GET/POST, enabling an unauthenticated remote attacker to sniff network traffic and access sensitive information. Cisco notes no software updates are available; exploitation...
CVE-2014-8024
The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP 1 GET or 2 POST request, aka Bug ID CSCus19789...
CVE-2014-8025
The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP 1 GET or 2 POST response, aka Bug ID CSCus19801...
CVE-2014-8026
Cross-site scripting XSS vulnerability in the Guest Server in Cisco Jabber allows remote attackers to inject arbitrary web script or HTML via a 1 GET or 2 POST parameter, aka Bug ID CSCus08074...
CVE-2014-8026
Cisco Jabber Guest Server contains a reflected XSS vulnerability (CVE-2014-8026) due to insufficient input validation of HTTP GET/POST parameters, enabling an unauthenticated remote attacker to inject scripts via crafted links. Exploitation targets the web interface user context. Affected product...
CVE-2014-8025
The Cisco advisory (Cisco Jabber Guest Server HTML5) describes a vulnerability in the Guest Server where missing encryption on sensitive data sent via HTTP GET/POST can be sniffed by an unauthenticated remote attacker to disclose information. Exploitation requires access to the network segment wh...
CVE-2014-8024: Exposure of Sensitive Information to an Unauthorized Actor
The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP 1 GET or 2 POST request, aka Bug ID CSCus19789...
PT-2014-8390
Name of the Vulnerable Software and Affected Versions Cisco Jabber affected versions not specified Description The issue allows remote attackers to obtain sensitive information by sniffing the network during an HTTP response, specifically when using HTML5 in the Guest Server API. This can occur...
CVE-2014-8025: Exposure of Sensitive Information to an Unauthorized Actor
The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP 1 GET or 2 POST response, aka Bug ID CSCus19801...
CVE-2014-8026: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Guest Server in Cisco Jabber allows remote attackers to inject arbitrary web script or HTML via a 1 GET or 2 POST parameter, aka Bug ID CSCus08074...
PT-2014-8389
Name of the Vulnerable Software and Affected Versions Cisco Jabber affected versions not specified Description The issue allows remote attackers to obtain sensitive information by sniffing the network during an HTTP request, specifically when the HTML5 CORS feature is used in the Guest Server. Th...
PT-2014-8391
Name of the Vulnerable Software and Affected Versions Cisco Jabber affected versions not specified Description A cross-site scripting XSS issue exists in the Guest Server of Cisco Jabber, allowing remote attackers to inject arbitrary web script or HTML via a GET or POST parameter. Recommendations...