CVE-2020-27134

Critical

Description

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.

SeverityCritical
CVSS9.9
Exploit probability—
ProductCisco Jabber
PublishedDec 11, 2020
First seenDec 11, 2020
Weakness typeCWE-201CWE-201

How to fix

Affected products

ProductAffected versionsFixed in
cisco jabber12.9\(0\), 12.9\(1\), 12.9\(2\), 12.9\(3\)—
cisco jabber_for_mobile_platforms12.9\(0\), 12.9\(1\), 12.9\(2\), 12.9\(3\)—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.