Jabber (Cisco) - vulnerabilities (CVEs)

34 CVEs, 0 in the last 30 days, 138 known versions, newest CVE from 2023-09-15. Vendor: Cisco.

CVEs of Jabber

CVE-2022-20917 - CVSS 4.3 (medium), 2023-09-15: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing feature of Cisco Jabber could allow an authenticated, remote…
CVE-2021-1569 - CVSS 6.5 (medium), 2021-06-16: Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive…
CVE-2021-1570 - CVSS 6.5 (medium), 2021-06-16: Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive…
CVE-2021-1411 - CVSS 9.9 (critical), 2021-03-24: Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute…
CVE-2021-1418 - CVSS 9.9 (critical), 2021-03-24: Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute…
CVE-2021-1417 - CVSS 9.9 (critical), 2021-03-24: Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute…
CVE-2021-1471 - CVSS 9.9 (critical), 2021-03-24: Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute…
CVE-2021-1469 - CVSS 9.9 (critical), 2021-03-24: Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute…
CVE-2020-26085 - CVSS 9.9 (critical), 2021-01-07: Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs…
CVE-2020-27132 - CVSS 9.9 (critical), 2020-12-11: Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs…
CVE-2020-27134 - CVSS 9.9 (critical), 2020-12-11: Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs…
CVE-2020-27133 - CVSS 9.9 (critical), 2020-12-11: Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs…
CVE-2020-27127 - CVSS 9.9 (critical), 2020-12-11: Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs…
CVE-2020-3498 - CVSS 6.5 (medium), 2020-09-04: A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to…
CVE-2020-3495 - CVSS 9.9 (critical), 2020-09-04: A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper…
CVE-2020-3430 - CVSS 8.8 (high), 2020-09-04: A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary…
CVE-2020-3537 - CVSS 5.7 (medium), 2020-09-04: A vulnerability in Cisco Jabber for Windows software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability…
CVE-2020-3155 - CVSS 7.4 (high), 2020-03-04: A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter…
CVE-2019-12645 - CVSS 7.8 (high), 2019-09-05: A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated,…
CVE-2019-1855 - CVSS 7.3 (high), 2019-07-04: A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to…
CVE-2018-0483 - CVSS 5.4 (medium), 2019-01-10: A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2018-0449 - CVSS 5.1 (medium), 2019-01-10: A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local…
CVE-2018-0201 - CVSS 5.4 (medium), 2018-02-22: A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2018-0199 - CVSS 6.1 (medium), 2018-02-22: A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against…
CVE-2017-12361 - CVSS 4 (medium), 2017-11-30: A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client. An…
CVE-2017-12358 - CVSS 5.4 (medium), 2017-11-30: A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an authenticated, remote attacker to…
CVE-2017-12356 - CVSS 6.1 (medium), 2017-11-30: A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to…
CVE-2017-12286 - CVSS 5.5 (medium), 2017-10-19: A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected…
CVE-2017-12284 - CVSS 5.5 (medium), 2017-10-19: A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information,…
CVE-2015-6409 - CVSS 5.9 (medium), 2015-12-26: Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP…
CVE-2015-4218 - CVSS 5 (medium), 2015-06-24: The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a…
CVE-2014-0666 - CVSS 4.3 (medium), 2014-01-16: Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload…
CVE-2013-1228 - CVSS 4.3 (medium), 2013-09-06: Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the…
CVE-2013-3393 - CVSS 5 (medium), 2013-06-26: The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of…