Vulnerabilities > Cisco > Jabber Guest > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-01-26 CVE-2020-3136 Cross-site Scripting vulnerability in Cisco Jabber Guest
A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.
network
low complexity
cisco CWE-79
6.1
2017-08-07 CVE-2017-6762 Cross-site Scripting vulnerability in Cisco Jabber Guest
A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0(0), and 11.0(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software.
network
low complexity
cisco CWE-79
6.1
2016-12-26 CVE-2016-9224 Improper Input Validation vulnerability in Cisco Jabber Guest
A vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to initiate connections to arbitrary hosts.
network
low complexity
cisco CWE-20
6.5
2016-02-06 CVE-2016-1311 Cross-site Scripting vulnerability in Cisco Jabber Guest 10.6.8
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server 10.6(8) allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224.
network
low complexity
cisco CWE-79
6.1