Information disclosure in Cisco Jabber
CVE-2020-27134
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.017 (76.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 76th percentile — 76.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.017 · newest: 0.017 · change: 0.000
Affected products
- Cisco Jabber
- Cisco Jabber — versions 12.9\(0\), 12.9\(3\), 12.9(3)
- Cisco Jabber For Mobile Platforms — versions 12.9\(0\), 12.9\(3\), 12.9(3)
Weakness classification (CWE)
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-Z… (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-27134?
- CVE-2020-27134 is a critical-severity vulnerability in Cisco Jabber, classified under Insertion of Sensitive Information into Sent Data. CVSS score: 9.9/10. Published 2020-12-11.
- How severe is CVE-2020-27134?
- Critical severity. CVSS v3 base score is 9.9 out of 10.