Code injection

Cisco Unified Presence CUP before 8.63 and Jabber Extensible Communications Platform aka Jabber XCP before 5.3 allow remote attackers to cause a denial of service process crash via a crafted XMPP stream header, aka Bug ID CSCtu32832...

CVE-2012-3935

Cisco Unified Presence CUP before 8.63 and Jabber Extensible Communications Platform aka Jabber XCP before 5.3 allow remote attackers to cause a denial of service process crash via a crafted XMPP stream header, aka Bug ID CSCtu32832...

CVE-2012-3935

CVE-2012-3935 affects Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (Jabber XCP) before 5.3. A remote, unauthenticated attacker can cause a denial of service (process crash) by sending a crafted XMPP stream header. The issue is documented in Cisco adviso...

CVE-2012-1693

Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 allows remote attackers to affect availability, related to XSCF Control Package XCP...

Design/Logic Flaw

Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 allows remote attackers to affect availability, related to XSCF Control Package XCP...

CVE-2012-1693

CVE-2012-1693 affects Oracle SPARC Enterprise M Series Servers XCP 1110, with the issue related to the XSCF Control Package (XCP) that can impact availability. The description in the connected records is generic and does not specify the exact root cause, vulnerable component version details, expl...

CVE-2012-0548

Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 and earlier allows local users to affect confidentiality, related to XSCF Control Package XCP...

Design/Logic Flaw

Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 and earlier allows local users to affect confidentiality, related to XSCF Control Package XCP...

CVE-2012-0548

Technical details of CVE-2012-0548 are not publicly available in the provided documents; there is no information here about affected products, root cause, impact, or remediation. Monitor for updates.

CVE-2012-1693: Undefined Security Weakness

Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 allows remote attackers to affect availability, related to XSCF Control Package XCP...

CVE-2012-0548: Undefined Security Weakness

Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 and earlier allows local users to affect confidentiality, related to XSCF Control Package XCP...

CVE-2011-3287

Cisco Jabber Extensible Communications Platform aka Jabber XCP 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption, and process crash via...

Code injection

Cisco Jabber Extensible Communications Platform aka Jabber XCP 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption, and process crash via...

CVE-2011-3287

Cisco Jabber Extensible Communications Platform aka Jabber XCP 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption, and process crash via...

CVE-2011-3287

Technical details for CVE-2011-3287 are not provided in the connected documents. The materials reference related issues (e.g., CVE-2003-1564) but do not describe affected products, impact, or fixes for this CVE.

CVE-2011-3287: Undefined Security Weakness

Cisco Jabber Extensible Communications Platform aka Jabber XCP 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption, and process crash via...

Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability

A denial of service DoS vulnerability exists in Jabber Extensible Communications Platform Jabber XCP and Cisco Unified Presence. An unauthenticated, remote attacker could exploit this vulnerability by sending malicious XML to an affected server. Successful exploitation of this vulnerability could...

CVE-2011-2299

Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M9000 XCP 1101 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to XSCF Control Package XCP...

CVE-2011-2299

CVE-2011-2299 affects Oracle SPARC Enterprise M3000/M4000/M5000/M8000/M9000 XCP 1101 and earlier, related to the XSCF Control Package (XCP). The vulnerability is described as unspecified with potential impact to confidentiality, integrity, and availability, and requires no user interaction. The a...

CVE-2011-2299

Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M9000 XCP 1101 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to XSCF Control Package XCP...