Vulnerability in Cisco Jabber For Windows
CVE-2019-1855
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need…
EPSS: 0.022 (80.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Cisco Jabber For Windows — versions unspecified
- Cisco Jabber
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2019-1855?
- CVE-2019-1855 is a high-severity vulnerability in Cisco Jabber For Windows, classified under CWE-264. CVSS score: 7.3/10. Published 2019-07-04.
- How severe is CVE-2019-1855?
- High severity. CVSS v3 base score is 7.3 out of 10.