JA
Product
Jabber
34
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 18Low 0
Watch
Add Jabber to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1411 | 9.9 | Mar 24 | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: before 12.1.5; 12.5.0 before 12.5.4; 12.6.0 before 12.6.5; 12.7.0 before 12.7.4; 12.8.0 before 12.8.5; 12.9.0 before 12.9.5 |
| CVE-2020-26085 | 9.9 | Jan 7 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying… Affected: before 12.1.4; before 12.8.5; before 12.9.4; before 12.9.4; 12.5 before 12.5.3; 12.6 before 12.6.4; +4 more |
| CVE-2020-27134 | 9.9 | Dec 11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying… Affected: 12.9(0); 12.9(0); 12.9(1); 12.9(1); 12.9(2); 12.9(2); +2 more |
| CVE-2020-27133 | 9.9 | Dec 11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying… Affected: 12.9(0); 12.9(0); 12.9(1); 12.9(1); 12.9(2); 12.9(2); +2 more |
| CVE-2020-27132 | 9.9 | Dec 11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying… Affected: 12.9(0); 12.9(0); 12.9(1); 12.9(1); 12.9(2); 12.9(2); +2 more |
| CVE-2020-27127 | 9.9 | Dec 11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying… Affected: 12.9(0); 12.9(0); 12.9(1); 12.9(1); 12.9(2); 12.9(2); +2 more |
| CVE-2020-3495 | 8.8 | Sep 4 | A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code Affected: 12.1 before 12.1.3; 12.5 before 12.5.2; 12.6 before 12.6.3; 12.7 before 12.7.2; 12.8 before 12.8.3; 12.9 before 12.9.1 |
| CVE-2020-3430 | 8.8 | Sep 4 | A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands Affected: 12.1 before 12.1.3; 12.5 before 12.5.2; 12.6 before 12.6.3; 12.7 before 12.7.2; 12.8 before 12.8.3; 12.9 before 12.9.1 |
| CVE-2019-12645 | 7.8 | Sep 5 | A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to… Affected: before 12.6\(1\) |
| CVE-2020-3155 | 7.4 | Mar 4 | A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco… Affected: All versions, or not specified |
| CVE-2019-1855 | 7.3 | Jul 4 | A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading… Affected: before 12.6\(2\) |
| CVE-2021-1469 | 7.2 | Mar 24 | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: before 12.1.5; 12.5.0 before 12.5.4; 12.6.0 before 12.6.5; 12.7.0 before 12.7.4; 12.8.0 before 12.8.5; 12.9.0 before 12.9.5 |
| CVE-2021-1569 | 6.5 | Jun 16 | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: 12.9 before 12.9.6.55898; 14.0 before 14.0.1.55914 |
| CVE-2021-1570 | 6.5 | Jun 16 | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: 12.9 before 12.9.6.55898; 14.0 before 14.0.1.55914 |
| CVE-2021-1418 | 6.5 | Mar 24 | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: before 12.1.5; before 12.8.7; through 12.9.0; through 12.9.0; 12.5.0 before 12.5.4; 12.6.0 before 12.6.5; +4 more |
| CVE-2021-1417 | 6.5 | Mar 24 | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: before 12.1.5; 12.5.0 before 12.5.4; 12.6.0 before 12.6.5; 12.7.0 before 12.7.4; 12.8.0 before 12.8.5; 12.9.0 before 12.9.5 |
| CVE-2020-3498 | 6.5 | Sep 4 | A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information Affected: 12.1 before 12.1.3; 12.5 before 12.5.2; 12.6 before 12.6.3; 12.7 before 12.7.2; 12.8 before 12.8.3; 12.9 before 12.9.1 |
| CVE-2018-0199 | 6.1 | Feb 22 | A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected… Affected: 11.9; 11.9(0) |
| CVE-2017-12356 | 6.1 | Nov 30 | A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 10.5(2); 11.9(1) |
| CVE-2015-6409 | 5.9 | Dec 26 | Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified… Affected: 10.6(2) |
| CVE-2020-3537 | 5.7 | Sep 4 | A vulnerability in Cisco Jabber for Windows software could allow an authenticated, remote attacker to gain access to sensitive information Affected: 12.1 before 12.1.3; 12.5 before 12.5.2; 12.6 before 12.6.3; 12.7 before 12.7.2; 12.8 before 12.8.3; 12.9 before 12.9.1 |
| CVE-2021-1471 | 5.6 | Mar 24 | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: before 12.1.5; before 12.8.7; through 12.9.0; through 12.9.0; 12.5.0 before 12.5.4; 12.6.0 before 12.6.5; +4 more |
| CVE-2017-12286 | 5.5 | Oct 19 | A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead… Affected: 1.9.30 |
| CVE-2017-12284 | 5.5 | Oct 19 | A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the… Affected: 11.8(.4) |
| CVE-2018-0483 | 5.4 | Jan 10 | A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected… Affected: 10.0(0) |
| CVE-2018-0201 | 5.4 | Feb 22 | A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected… Affected: 11.9; 11.9(.0) |
| CVE-2017-12358 | 5.4 | Nov 30 | A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an authenticated, remote attacker to conduct a cross-site… Affected: 11.9(0) |
| CVE-2022-20917 | 4.3 | Sep 15 | A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing feature of Cisco Jabber could allow an authenticated, remote attacker to manipulate the… Affected: before 12.6.6; before 12.8.8; before 14.1.4; before 14.1.4; 12.7 before 12.7.6; 12.8 before 12.8.7; +6 more |
| CVE-2018-0449 | 4.2 | Jan 10 | A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt… Affected: 12.1(0) |
| CVE-2017-12361 | 4.0 | Nov 30 | A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client Affected: 11.8(0); 11.8(1); 11.8(2); 11.8(3) |
| CVE-2015-4218 | – | Jun 24 | The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET… Affected: 9.6(0); 9.6(1); 9.6(2); 9.6(3); 9.7(0); 9.7(1); +4 more |
| CVE-2014-0666 | – | Jan 16 | Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of… Affected: through 9.2\(.1\); 9.0; 9.0(.0); 9.0(.1); 9.0(.2); 9.0(.3); +11 more |
| CVE-2013-1228 | – | Sep 6 | Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via… Affected: All versions, or not specified |
| CVE-2013-3393 | – | Jun 26 | The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service (process… Affected: All versions, or not specified |
Showing 34