Jabber vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

JA

Product

Jabber

by Cisco · last CVE Sep 15, 2023

34

CVEs

0

On KEV

9.9

Max CVSS

0

New 30D

Vulnerabilities34 In the news0 Timeline

Severity mix

Critical 6High 6Medium 18Low 0

Severity

All severities34 Critical6 High6 Medium18 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Jabber to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-1569	6.5	1%	Jun 16	Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: 12.9 before 12.9.6.55898; 14.0 before 14.0.1.55914
CVE-2021-1570	6.5	1%	Jun 16	Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: 12.9 before 12.9.6.55898; 14.0 before 14.0.1.55914
CVE-2021-1418	6.5	1%	Mar 24	Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: before 12.1.5; before 12.8.7; through 12.9.0; through 12.9.0; 12.5.0 before 12.5.4; 12.6.0 before 12.6.5; +4 more
CVE-2021-1417	6.5	1%	Mar 24	Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: before 12.1.5; 12.5.0 before 12.5.4; 12.6.0 before 12.6.5; 12.7.0 before 12.7.4; 12.8.0 before 12.8.5; 12.9.0 before 12.9.5
CVE-2020-3498	6.5	2%	Sep 4	A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information Affected: 12.1 before 12.1.3; 12.5 before 12.5.2; 12.6 before 12.6.3; 12.7 before 12.7.2; 12.8 before 12.8.3; 12.9 before 12.9.1
CVE-2018-0199	6.1	2%	Feb 22	A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected… Affected: 11.9; 11.9(0)
CVE-2017-12356	6.1	1%	Nov 30	A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 10.5(2); 11.9(1)
CVE-2015-6409	5.9	1%	Dec 26	Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified… Affected: 10.6(2)
CVE-2020-3537	5.7	1%	Sep 4	A vulnerability in Cisco Jabber for Windows software could allow an authenticated, remote attacker to gain access to sensitive information Affected: 12.1 before 12.1.3; 12.5 before 12.5.2; 12.6 before 12.6.3; 12.7 before 12.7.2; 12.8 before 12.8.3; 12.9 before 12.9.1
CVE-2021-1471	5.6	1%	Mar 24	Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Affected: before 12.1.5; before 12.8.7; through 12.9.0; through 12.9.0; 12.5.0 before 12.5.4; 12.6.0 before 12.6.5; +4 more
CVE-2017-12286	5.5	0%	Oct 19	A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead… Affected: 1.9.30
CVE-2017-12284	5.5	0%	Oct 19	A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the… Affected: 11.8(.4)
CVE-2018-0483	5.4	1%	Jan 10	A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected… Affected: 10.0(0)
CVE-2018-0201	5.4	1%	Feb 22	A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected… Affected: 11.9; 11.9(.0)
CVE-2017-12358	5.4	1%	Nov 30	A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an authenticated, remote attacker to conduct a cross-site… Affected: 11.9(0)
CVE-2022-20917	4.3	1%	Sep 15	A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing feature of Cisco Jabber could allow an authenticated, remote attacker to manipulate the… Affected: before 12.6.6; before 12.8.8; before 14.1.4; before 14.1.4; 12.7 before 12.7.6; 12.8 before 12.8.7; +6 more
CVE-2018-0449	4.2	0%	Jan 10	A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt… Affected: 12.1(0)
CVE-2017-12361	4.0	0%	Nov 30	A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client Affected: 11.8(0); 11.8(1); 11.8(2); 11.8(3)