Cisco

Jabber Guest

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2020-3136

  • EPSS 0.72%
  • Veröffentlicht 26.01.2020 05:15:17
  • Zuletzt bearbeitet 21.11.2024 05:30:24

A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The...

6.1

CVE-2017-6762

  • EPSS 0.23%
  • Veröffentlicht 07.08.2017 06:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0(0), and 11.0(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management...

6.5

CVE-2016-9224

  • EPSS 0.3%
  • Veröffentlicht 26.12.2016 08:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

A vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to initiate connections to arbitrary hosts. More Information: CSCvc31635. Known Affected Releases: 10.6(9). Known Fixed Releases: 11.0(0).

6.1

CVE-2016-1311

  • EPSS 0.25%
  • Veröffentlicht 06.02.2016 05:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server 10.6(8) allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224.

4.3

CVE-2014-8026

  • EPSS 0.26%
  • Veröffentlicht 23.12.2014 02:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Guest Server in Cisco Jabber allows remote attackers to inject arbitrary web script or HTML via a (1) GET or (2) POST parameter, aka Bug ID CSCus08074.

4.3

CVE-2014-8025

  • EPSS 0.39%
  • Veröffentlicht 23.12.2014 02:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST response, aka Bug ID CSCus19801.

4.3

CVE-2014-8024

  • EPSS 0.39%
  • Veröffentlicht 23.12.2014 02:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST request, aka Bug ID CSCus19789.