CVE-2015-4218

Cisco Jabber <= 9.6(3) and 9.7 <= 9.7(5) - Exposure of Sensitive Information via GET Request

Title source: llm

Description

The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858.

References (3)

Core 3

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/viewAlert.x?alertId=39494

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1032711

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/75377

Scores

EPSS 0.0263

EPSS Percentile 83.7%

Details

CWE

CWE-200

Status published

Products (10)

cisco/jabber 9.6\(0\)

cisco/jabber 9.6\(1\)

cisco/jabber 9.6\(2\)

cisco/jabber 9.6\(3\)

cisco/jabber 9.7\(0\)

cisco/jabber 9.7\(1\)

cisco/jabber 9.7\(2\)

cisco/jabber 9.7\(3\)

cisco/jabber 9.7\(4\)

cisco/jabber 9.7\(5\)

Published Jun 24, 2015

Tracked Since Feb 18, 2026