CVE-2018-0201: XSS
A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to improper neutralization of input during web page generation. An attacker could exploit this vulnerability by embedding media in instant messages. An exploit could allow the attacker to cause the recipient chat client to make outbound requests. Cisco Bug IDs: CSCve54001.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-0201?
CVE-2018-0201 is a vulnerability in Cisco Jabber Client Framework (JCF) that allows an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device.
How does CVE-2018-0201 impact Cisco Jabber?
CVE-2018-0201 impacts Cisco Jabber by allowing an authenticated remote attacker to perform a cross-site scripting (XSS) attack.
What causes the vulnerability in CVE-2018-0201?
The vulnerability in CVE-2018-0201 is caused by improper neutralization of input during web page generation.
Which versions of Cisco Jabber are affected by CVE-2018-0201?
Cisco Jabber version 11.9 and 11.9(0) on Windows and Cisco Jabber on Mac OS X are affected by CVE-2018-0201.
How can CVE-2018-0201 be fixed?
To fix CVE-2018-0201, it is recommended to update Cisco Jabber to a patched version provided by Cisco.