CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-1411

CVSS 9.9v3.1pub. 2021-03-24upd. 2024-11-21

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic, or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

  • Cisco Jabber

    APP
    Cisco
    < 12.1.512.5.0 – 12.5.4 (excl.)12.6.0 – 12.6.5 (excl.)12.7.0 – 12.7.4 (excl.)12.8.0 – 12.8.5 (excl.)12.9.0 – 12.9.5 (excl.)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2021-1471CRITICAL9.9PL ✓same product

Cisco Jabber — wielokrotne podatności RCE, ujawnienie danych i DoS

CVE-2021-1469CRITICAL9.9PL ✓same product

Wiele podatności w Cisco Jabber umożliwiających RCE z podwyższonymi uprawnieniami

CVE-2021-1417CRITICAL9.9PL ✓same product

Krytyczne podatności w Cisco Jabber — eskalacja uprawnień i DoS

CVE-2021-1418CRITICAL9.9PL ✓same product

Cisco Jabber — wielokrotne podatności umożliwiające RCE i DoS

CVE-2020-26085CRITICAL9.9PL ✓same product

Cisco Jabber — command injection umożliwiający RCE z podwyższonymi uprawnieniami