cisco jabber guest vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0(0), and 11.0(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected...

Cisco Jabber Guest 10.6.9 Cisco Jabber Guest 10.6.10 Cisco Jabber Guest 10.6.11 Cisco Jabber Guest 10.6.12 Cisco Jabber Guest 11.0.0

6.4

CVSSv2

A vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to initiate connections to arbitrary hosts. More Information: CSCvc31635. Known Affected Releases: 10.6(9). Known Fixed Releases: 11.0(0)....

Cisco Jabber Guest 10.0.0 Cisco Jabber Guest 10.0.2 Cisco Jabber Guest 10.5.0 Cisco Jabber Guest 10.6.8 Cisco Jabber Guest 10.6.9

4.3

CVSSv2

The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST response, aka Bug ID CSCus19801....

Cisco Jabber Guest

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Guest Server in Cisco Jabber allows remote attackers to inject arbitrary web script or HTML via a (1) GET or (2) POST parameter, aka Bug ID CSCus08074....

Cisco Jabber Guest

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server 10.6(8) allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224....

Cisco Jabber Guest 10.6.8

4.3

CVSSv2

The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST request, aka Bug ID CSCus19789....

Cisco Jabber Guest

4.3

CVSSv2

A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because...

Cisco Jabber Guest

5

CVSSv2

Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362....

Cisco Telepresence Video Communication Server Software X8.1.1 Cisco Telepresence Video Communication Server Software X8.1.2 Cisco Telepresence Video Communication Server Software X8.1 Base Cisco Telepresence Video Communication Server Software X8.2.1 Cisco Telepresence Video Communication Server Software X8.2.2 Cisco Telepresence Video Communication Server Software X8.2 Base Cisco Telepresence Video Communication Server Software X8.5.0 Cisco Telepresence Video Communication Server Software X8.5.1 Cisco Telepresence Video Communication Server Software X8.5.2 Cisco Telepresence Video Communication Server Software X8.5.3 Cisco Telepresence Video Communication Server Software X8.6.0 Cisco Telepresence Video Communication Server Software X8.6.1 Cisco Telepresence Video Communication Server Software X8.7 Base

4.3

CVSSv2

Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors, aka Bug ID CSCuw87419....

Cisco Jabber 10.6\\(2\\)

5

CVSSv2

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message....

Openssl Openssl 1.0.2 Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2d1 Article available

1 2 3 4 5 6 NEXT »