CVE-2020-3495

cisco jabber

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-3495

Katalog CVE

CVSS 8.8 · High EPSS 60,5%

Kerentanan Improper Input Validation pada cisco jabber. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages to the affected software. A successful exploit could allow the attacker to cause the application to execute arbitrary programs on the targeted system with the privileges of the user account that is running the Cisco Jabber client software, possibly resulting in arbitrary code execution.

Rincian

Terbit di NVD
4 September 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
EPSS (30 hari)
60,5% peluang dieksploitasi; lebih tinggi dari 99,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco jabber Versi 12.1 hingga sebelum 12.1.3
cisco jabber Versi 12.5 hingga sebelum 12.5.2
cisco jabber Versi 12.6 hingga sebelum 12.6.3
cisco jabber Versi 12.7 hingga sebelum 12.7.2
cisco jabber Versi 12.8 hingga sebelum 12.8.3
cisco jabber Versi 12.9 hingga sebelum 12.9.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.