Skip to content
fr Sign in
4.6 Medium

CVE-2018-0483 A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a…

Description

A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could exploit this vulnerability by executing arbitrary JavaScript in the Jabber client of the recipient. A successful exploit could allow the attacker to execute arbitrary script code in the context of the targeted client or allow the attacker to access sensitive client-based information.

Affected products and versions

Product Affected versions Fixed in
Cisco Jabber IM for Android Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Jabber IM for Android

The 2 CVEs of Cisco Jabber IM for Android →
CVE-2020-3155 A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated,… 7.4 High
Track this CVE