CVE-2020-3136

CVE-2020-3136 refers to a cross-site scripting vulnerability in Cisco Jabber Guest’s web-based management interface. The issue arises from improper validation of user-supplied input, enabling an unauthenticated, remote attacker to persuade a user to click a malicious link and execute script code ...

CVE-2017-6762

CVE-2017-6762 affects Cisco Jabber Guest Server’s web-based management interface (versions 10.6(9), 11.0(0), 11.0(1)). The issue is due to insufficient validation of user-supplied input, allowing an unauthenticated, remote attacker to deliver a crafted link that could execute arbitrary script wit...

CVE-2014-8026

Cisco Jabber Guest Server contains a reflected XSS vulnerability (CVE-2014-8026) due to insufficient input validation of HTTP GET/POST parameters, enabling an unauthenticated remote attacker to inject scripts via crafted links. Exploitation targets the web interface user context. Affected product...

CVE-2014-8025

The Cisco advisory (Cisco Jabber Guest Server HTML5) describes a vulnerability in the Guest Server where missing encryption on sensitive data sent via HTTP GET/POST can be sniffed by an unauthenticated remote attacker to disclose information. Exploitation requires access to the network segment wh...

CVE-2016-9224

Cisco Jabber Guest Server exposes an unauthenticated remote vector that enables connections to arbitrary hosts due to insufficient access control for HTTP traffic. Affected release: 10.6(9); fixed in 11.0(0). Advisory and public details (Cisco SA 2016-12-21) describe a URL-based vulnerability tha...

CVE-2016-1311

Cisco Jabber Guest Server 10.6(8) is affected by CVE-2016-1311: a cross-site scripting (XSS) flaw in the HTTP web-based management interface allows remote attackers to inject arbitrary script or HTML via the host tag parameter. According to Cisco, the vulnerability stems from insufficient input v...

CVE-2014-8024

CVE-2014-8024 affects Cisco Jabber Guest Server: the API vulnerable due to insufficient validation of values passed via HTTP GET/POST, enabling an unauthenticated remote attacker to sniff network traffic and access sensitive information. Cisco notes no software updates are available; exploitation...