Cisco Jabber Clients Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient...

Cisco Jabber Information Disclosure Vulnerability

A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client. An attacker could exploit this vulnerability to gain information to conduct additional attacks. The vulnerability is due to the way Cisco Jabber...

Cisco Jabber Clients Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is du...

Cisco WebEx Meeting Center Information Disclosure Vulnerability (CNVD-2017-32120)

Cisco Jabber is a cross-device collaboration system from Cisco Cisco. The system provides voice, video, desktop sharing and conferencing. An information disclosure vulnerability exists in the web interface in Cisco Jabber, which stems from the program's lack of input and authentication detection....

Cisco Jabber for Windows Information Disclosure Vulnerability

Cisco Jabber for Windows is the United States Cisco Cisco company's set of unified communications client solutions for the Windows platform. The program provides online status display, instant messaging, voice and other functions. A local information disclosure vulnerability exists in Cisco Jabbe...

Input validation

A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input and validation checks in t...

CVE-2017-12286

A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input and validation checks in t...

CVE-2017-12284

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

Design/Logic Flaw

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

CVE-2017-12286

A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input and validation checks in t...

CVE-2017-12284

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

CVE-2017-12284

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

CVE-2017-12286

Cisco Jabber web interface vulnerability (CVE-2017-12286) allows an authenticated, local attacker to retrieve full user profile information due to insufficient input/validation checks. Affected releases are all Cisco Jabber versions prior to 1.9.31. Exploitation requires local authentication and ...

CVE-2017-12286

A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input and validation checks in t...

CVE-2017-12284

The CVE-2017-12284 issue affects Cisco Jabber for Windows Client (web interface). Affected component: the web interface of Cisco Jabber for Windows. Root cause: insufficient input and validation checks that allow an authenticated, local attacker to issue commands and view profile information beyo...

PT-2017-12460

Name of the Vulnerable Software and Affected Versions Cisco Jabber versions prior to 1.9.31 Description A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information, leading to the disclosure of confidential information. Th...

CVE-2017-12284: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

CVE-2017-12286: Improper Input Validation

A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input and validation checks in t...

PT-2017-12458

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows Client affected versions not specified Description A vulnerability in the web interface could allow an authenticated, local attacker to retrieve user profile information, potentially disclosing confidential information...

Cisco Jabber for Windows Client Information Disclosure Vulnerability

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...