Lucene search
K

22 matches found

OSV
OSV
added 2021/06/16 6:15 p.m.3 views

CVE-2021-1570

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause a denial of service DoS condition. For more information about these vulnerabilities, see the Details section of this...

6.5CVSS6.8AI score
Exploits0References1
OSV
OSV
added 2021/03/24 9:15 p.m.1 views

CVE-2021-1411

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic,...

9.9CVSS7.3AI score0.01382EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/24 12:0 a.m.3 views

Cisco Jabber for Windows 安全漏洞

Cisco Jabber is a web conferencing and instant messaging application that allows users to send messages over the Extensible Messaging and Status Protocol XMPP. Cisco Jabber has a denial of service vulnerability that can be exploited by an attacker by sending a crafted XMPP message to the target...

9.9CVSS7AI score0.00941EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/03/24 12:0 a.m.3 views

PT-2021-2350 · Cisco · Cisco Jabber For Windows +2

Name of the Vulnerable Software and Affected Versions: Cisco Jabber for Windows affected versions not specified Cisco Jabber for MacOS affected versions not specified Cisco Jabber for mobile platforms affected versions not specified Description: The issue allows an attacker to execute arbitrary...

9.9CVSS7.9AI score0.0103EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/03/24 12:0 a.m.2 views

PT-2021-2369 · Cisco · Cisco Jabber For Windows +2

Name of the Vulnerable Software and Affected Versions: Cisco Jabber for Windows affected versions not specified Cisco Jabber for MacOS affected versions not specified Cisco Jabber for mobile platforms affected versions not specified Description: The issue is related to insufficient input validati...

9.9CVSS7.5AI score0.00958EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/03/24 12:0 a.m.20 views

Cisco Jabber for Windows 输入验证错误漏洞

Cisco Jabber is a web conferencing and instant messaging application that allows users to send messages over the Extensible Messaging and Status Protocol XMPP. A code execution vulnerability exists in Cisco Jabber, which is caused by incorrect validation of message content. An attacker can send...

9.9CVSS8.2AI score0.0103EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.2 views

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS programs is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a remote attacker to perform a cross-site scripting attack...

9.9CVSS7.3AI score0.02496EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.3 views

The vulnerability of the Cisco Jabber software platform for Windows, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco Jabber software for Windows relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

9CVSS8.1AI score0.01335EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/12/10 4:0 p.m.2 views

CVE-2020-27127

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system OS with elevated privileges or gain access to sensitive information. For more information about these...

9.9CVSS6AI score0.01335EPSS
Exploits0References2
OSV
OSV
added 2020/09/04 3:15 a.m.1 views

CVE-2020-3430

A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper handling of input to the application protocol handlers. An attacker could exploit this...

8.8CVSS7.7AI score0.03902EPSS
Exploits0References1
OSV
OSV
added 2020/09/04 3:15 a.m.3 views

CVE-2020-3495

A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted Extensible Messaging and Presence...

8.8CVSS6.2AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2020/09/04 2:25 a.m.17 views

CVE-2020-3537 Cisco Jabber for Windows Universal Naming Convention Link Handling Vulnerability

A vulnerability in Cisco Jabber for Windows software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted messages that...

5.7CVSS6.8AI score0.01267EPSS
Exploits0References1
CNVD
CNVD
added 2020/09/03 12:0 a.m.2 views

Cisco Jabber for Windows Information Disclosure Vulnerability (CNVD-2020-51776)

Cisco Jabber for Windows securely unifies status, instant messaging, video, voice, voice messaging, screen sharing, and conferencing capabilities into a single client that simplifies communications and increases productivity. An information disclosure vulnerability exists in Cisco Jabber for...

6.5CVSS6.4AI score0.01854EPSS
Exploits0References1
CNVD
CNVD
added 2020/09/03 12:0 a.m.1 views

Cisco Jabber for Windows Command Injection Vulnerability

Cisco Jabber for Windows and Cisco Jabber are both products of the U.S. Cisco Cisco.Cisco Jabber for Windows is a set of unified communications client solutions for the Windows platform. The program provides online status display, instant messaging, voice and other functions.Cisco Jabber is a...

9.3CVSS6.9AI score0.03902EPSS
Exploits0References1
NCSC
NCSC
added 2020/09/03 12:0 a.m.10 views

Vulnerabilities fixed in Cisco Jabber for Windows client

Vulnerabilities have been fixed in Cisco Jabber for Windows client. The vulnerabilities allow an authenticated remote malicious person to remote user to obtain sensitive information and to execute arbitrary code under user privileges. To exploit the vulnerabilities, the malicious party must send...

9.9CVSS7.5AI score0.61862EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/07/16 12:0 a.m.2 views

The vulnerability of the dynamic library loading mechanism in the Cisco Jabber for Windows multimedia corporate messaging system allows a hacker to execute arbitrary code with the privileges of another user’s account.

The vulnerability of the dynamic library loading mechanism in the Cisco Jabber for Windows multimedia corporate messaging system is related to insufficient checking of resources loaded by the application. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with the...

7.3CVSS6AI score0.02195EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2019/07/04 8:15 p.m.2 views

CVE-2019-1855

A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...

7.3CVSS7.4AI score0.02195EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2019/07/04 7:50 p.m.9 views

CVE-2019-1855 Cisco Jabber for Windows DLL Preloading Vulnerability

A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...

7.3CVSS7.4AI score0.02195EPSS
Exploits0References2
CNVD
CNVD
added 2017/12/04 12:0 a.m.3 views

Cisco Jabber for Windows Information Disclosure Vulnerability (CNVD-2017-36124)

Cisco Jabber for Windows is the United States Cisco Cisco company's set of unified communications client solutions for the Windows platform. The program provides online status display, instant messaging, voice and other functions. An information disclosure vulnerability exists in Cisco Jabber for...

4CVSS6AI score0.00387EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/11/30 9:0 a.m.26 views

CVE-2017-12361

A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client. An attacker could exploit this vulnerability to gain information to conduct additional attacks. The vulnerability is due to the way Cisco Jabber...

4.2AI score0.00387EPSS
Exploits0References3
Rows per page
Query Builder