What is CVE-2017-12286?

CVE-2017-12286 is a medium-severity vulnerability in Cisco Jabber, classified under Improper Input Validation. CVSS score: 5.5/10. Published 2017-10-19.

How severe is CVE-2017-12286?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Improper input validation in Cisco Jabber

CVE-2017-12286

A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead to the disclosure of confidential information. The vulnerab…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.001 (23.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Cisco Jabber — versions 1.9.30
Cisco Webex_meeting_center — versions 1.9.26
N/a Cisco Jabber — versions Cisco Jabber

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-12286?: CVE-2017-12286 is a medium-severity vulnerability in Cisco Jabber, classified under Improper Input Validation. CVSS score: 5.5/10. Published 2017-10-19.
How severe is CVE-2017-12286?: Medium severity. CVSS v3 base score is 5.5 out of 10.