Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

34 records in Jabber · all components

Priority MEDIUM 47

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileg…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02316 Published 2021-01-06 No fix listed CWE-201
Priority MEDIUM 47

A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03902 Published 2020-09-04 No fix listed CWE-78
Priority MEDIUM 46

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated p…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0137 Published 2021-03-24 No fix listed CWE-170
Priority MEDIUM 46

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated p…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01431 Published 2021-03-24 No fix listed CWE-170
Priority MEDIUM 46

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileg…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01667 Published 2020-12-11 No fix listed CWE-201
Priority MEDIUM 46

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileg…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01447 Published 2020-12-11 No fix listed CWE-201
Priority MEDIUM 46

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileg…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01351 Published 2020-12-11 No fix listed CWE-201
Priority MEDIUM 45

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated p…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01067 Published 2021-03-24 No fix listed CWE-170
Priority MEDIUM 45

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated p…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00975 Published 2021-03-24 No fix listed CWE-170
Priority MEDIUM 45

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated p…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00992 Published 2021-03-24 No fix listed CWE-170
Priority MEDIUM 45

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileg…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01137 Published 2020-12-11 No fix listed CWE-201
Priority LOW 38

A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0226 Published 2019-07-04 Fixed in 12.6(0) CWE-264
Priority LOW 36

A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco Webex video devices and Cisco collaborati…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00896 Published 2020-03-04 No fix listed CWE-295
Priority LOW 36

A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00313 Published 2019-09-05 Fixed in 12.6(1) CWE-20
Priority LOW 32

A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01631 Published 2020-09-04 No fix listed CWE-200
Priority LOW 31

A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02035 Published 2018-02-22 No fix listed CWE-79
Priority LOW 30

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause a denial of service (DoS) condition.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00786 Published 2021-06-16 No fix listed CWE-399
Priority LOW 30

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause a denial of service (DoS) condition.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00796 Published 2021-06-16 No fix listed CWE-399
TI-2017-09128 CVE-2017-12356 · GHSA-rxq6-w25h-3xh7

Cross-site scripting in Cisco Jabber

Priority LOW 30

A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of th…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0122 Published 2017-11-30 No fix listed CWE-79
Load more
Open these records in search →