Known vulnerabilities in Cisco Jabber - page 8

Vendor: Cisco Systems, Inc
Software: Cisco Jabber
Software CPE: cpe:2.3:a:cisco_systems:cisco_jabber:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 154
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Jabber Cisco Jabber is affected by 154 known vulnerabilities: 2 critical, 31 high, 72 medium, 49 low Critical High Medium Low

Vulnerabilities (154)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66867 - Out-of-bounds write
CVE-2021-38593		 CWE-787 Low
No
No
 14.3.0.308378.11 on Thin OS 2405 30.08.2022 SB2021081244
SB2022083038
SB2022051045
and 13 more
#VU46256 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3537		 CWE-200 Medium
No
No
 12.1.3, 12.5.2, 12.6.3, 12.7.2, 12.8.3, 12.9.1 03.09.2020 SB2020090312
#VU46255 - Improper input validation
CVE-2020-3495		 CWE-20 Medium
No
No
 12.1.3, 12.5.2, 12.6.3, 12.7.2, 12.8.3, 12.9.1 03.09.2020 SB2020090312
#VU46254 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3498		 CWE-200 Medium
No
No
 12.1.3, 12.5.2, 12.6.3, 12.7.2, 12.8.3, 12.9.1 03.09.2020 SB2020090312
#VU46253 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-3430		 CWE-78 High
No
No
 12.1.3, 12.5.2, 12.6.3, 12.7.2, 12.8.3, 12.9.1 03.09.2020 SB2020090312
#VU25782 - Improper Certificate Validation
CVE-2020-3155		 CWE-295 Medium
No
No
 - 05.03.2020 SB2020030507
#VU10686 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0199		 CWE-79 Low
No
No
 - 22.02.2018 SB2018022208
#VU10685 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0201		 CWE-79 Low
No
No
 - 21.02.2018 SB2018022208
#VU9463 - Exposure of sensitive information to an unauthorized actor
CVE-2017-12361		 CWE-200 Low
No
No
 - 30.11.2017 SB2017113008
#VU9462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12356		 CWE-79 Low
No
No
 - 30.11.2017 SB2017113008
#VU9461 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12358		 CWE-79 Low
No
No
 - 29.11.2017 SB2017113008
#VU8888 - Improper input validation
CVE-2017-12284		 CWE-20 Low
No
No
 - 19.10.2017 SB2017101909
#VU8886 - Improper input validation
CVE-2017-12286		 CWE-20 Low
No
No
 - 19.10.2017 SB2017101909
#VU7680 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6762		 CWE-79 Low
No
No
 - 03.08.2017 SB2017080309


Showing elements 141 - 160 out of 154