Cisco Jabber for Windows Code Execution

The vulnerability of the Cisco Jabber for Windows software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially created XMPP message remotely...

Cisco Jabber for Windows DoS

The vulnerability of the Cisco Jabber for Windows software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure by sending specially crafted XMPP messages...

Cisco Jabber Operating System Command Injection Vulnerability

Cisco Jabber for Windows and Cisco Jabber are both products of the U.S. Cisco Cisco.Cisco Jabber for Windows is a set of unified communications client solutions for the Windows platform. The program provides online status display, instant messaging, voice and other functions.Cisco Jabber is a...

CVE-2020-3430: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper handling of input to the application protocol handlers. An attacker could exploit this...

CVE-2020-3537: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Cisco Jabber for Windows software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted messages that...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities see the Cisco Security Advisories page. The Cybersecurity and...

PT-2020-3855

Name of the Vulnerable Software and Affected Versions: Cisco Jabber for Windows affected versions not specified Description: The issue is related to improper validation of message contents, which could allow an authenticated, remote attacker to gain access to sensitive information. An attacker...

PT-2020-3843

Name of the Vulnerable Software and Affected Versions: Cisco Jabber for Windows affected versions not specified Description: A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code due to improper validation of message contents. An...

PT-2020-3845

Name of the Vulnerable Software and Affected Versions: Cisco Jabber for Windows affected versions not specified Description: A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

PT-2019-2649

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows affected versions not specified Description A vulnerability in the loading mechanism of specific dynamic link libraries could allow an authenticated, local attacker to perform a DLL preloading attack. The vulnerability...

CVE-2017-12361: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client. An attacker could exploit this vulnerability to gain information to conduct additional attacks. The vulnerability is due to the way Cisco Jabber...

PT-2017-12527

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows affected versions not specified Description A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client. The issue arises from...

CVE-2017-12284: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

PT-2017-12458

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows Client affected versions not specified Description A vulnerability in the web interface could allow an authenticated, local attacker to retrieve user profile information, potentially disclosing confidential information...

PT-2013-4350

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows affected versions not specified Cisco Virtualization Experience Media Engine affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a process crash and...

CVE-2013-3393: Improper Input Validation

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...