EUVD-2018-1022

Malware in sbrugna...

CVE-2019-12645: Improper Input Validation

A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...

PT-2019-3259

Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework for Mac affected versions not specified Description The issue is related to improper file level permissions, allowing an authenticated, local attacker to execute arbitrary code on an affected device. An attacker...

CVE-2018-0449: Incorrect Permission Assignment for Critical Resource

A vulnerability in the Cisco Jabber Client Framework JCF software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerability exists due to insecure directory...

CVE-2018-0483: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

PT-2019-1390

Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework affected versions not specified Description A vulnerability exists due to insufficient validation of user-supplied input, allowing an authenticated, remote attacker to conduct a cross-site scripting XSS attack. Th...

PT-2019-1381

Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework affected versions not specified Description The issue is related to insecure directory permissions set on a directory created by the Cisco Jabber Client Framework, allowing an authenticated, local attacker to...

CVE-2018-0199: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco Jabber Client Framework JCF could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page. An attacker could...

CVE-2018-0201: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of input during web page generation. An attacker could exploit...

PT-2018-8664

Name of the Vulnerable Software and Affected Versions: Cisco Jabber Client Framework JCF affected versions not specified Description: A security issue in Cisco Jabber Client Framework could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an...

PT-2018-8666

Name of the Vulnerable Software and Affected Versions: Cisco Jabber Client Framework JCF affected versions not specified Description: A security issue exists due to improper neutralization of input during web page generation, allowing an authenticated, remote attacker to conduct a cross-site...