Vulnerabilities (CVE)

Filtered by vendor Cisco Subscribe
Filtered by product Jabber
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-0666 1 Cisco 1 Jabber 2017-08-29 4.3 MEDIUM N/A
Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056.
CVE-2015-4218 1 Cisco 1 Jabber 2016-12-28 5.0 MEDIUM N/A
The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858.
CVE-2013-1228 1 Cisco 1 Jabber 2014-03-05 4.3 MEDIUM N/A
Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted certificate, aka Bug ID CSCug30280.
CVE-2013-3393 1 Cisco 2 Jabber, Virtualization Experience Media Engine 2013-08-31 5.0 MEDIUM N/A
The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service (process crash and call disconnection) via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117.