Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87397
HistoryOct 11, 2022 - 12:00 a.m.

Cisco Jabber Input Validation Error Vulnerability

2022-10-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
340
cisco jabber
input validation
version 14.1.3
xmpp messages
remote attacker
authenticated

0.001 Low

EPSS

Percentile

19.4%

Cisco Jabber is a unified communications client solution from Cisco. An input validation error vulnerability exists in Cisco Jabber Client Software versions prior to 14.1.3, which stems from improper handling of nested XMPP messages in requests sent to Cisco Jabber Client Software, and could be exploited by an authenticated remote attacker to manipulate the content of XMPP messages used by the affected application .

CPENameOperatorVersion
cisco cisco jabberlt14.1.3

0.001 Low

EPSS

Percentile

19.4%