What is CVE-2018-0201?

CVE-2018-0201 is a vulnerability in Cisco Jabber Client Framework (JCF) that allows an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device.

How does CVE-2018-0201 impact Cisco Jabber?

CVE-2018-0201 impacts Cisco Jabber by allowing an authenticated remote attacker to perform a cross-site scripting (XSS) attack.

What causes the vulnerability in CVE-2018-0201?

The vulnerability in CVE-2018-0201 is caused by improper neutralization of input during web page generation.

Which versions of Cisco Jabber are affected by CVE-2018-0201?

Cisco Jabber version 11.9 and 11.9(0) on Windows and Cisco Jabber on Mac OS X are affected by CVE-2018-0201.

How can CVE-2018-0201 be fixed?

To fix CVE-2018-0201, it is recommended to update Cisco Jabber to a patched version provided by Cisco.

Vulnerability/
CVE-2018-0201

medium

5.4

CWE

22/2/2018

5/8/2024

CVE-2018-0201: XSS

First published: Thu Feb 22 2018(Updated: )

A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to improper neutralization of input during web page generation. An attacker could exploit this vulnerability by embedding media in instant messages. An exploit could allow the attacker to cause the recipient chat client to make outbound requests. Cisco Bug IDs: CSCve54001.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Jabber	=11.9
Cisco Jabber	=11.9\(.0\)
Cisco Jabber

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2018-0201?
CVE-2018-0201 is a vulnerability in Cisco Jabber Client Framework (JCF) that allows an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device.
How does CVE-2018-0201 impact Cisco Jabber?
CVE-2018-0201 impacts Cisco Jabber by allowing an authenticated remote attacker to perform a cross-site scripting (XSS) attack.
What causes the vulnerability in CVE-2018-0201?
The vulnerability in CVE-2018-0201 is caused by improper neutralization of input during web page generation.
Which versions of Cisco Jabber are affected by CVE-2018-0201?
Cisco Jabber version 11.9 and 11.9(0) on Windows and Cisco Jabber on Mac OS X are affected by CVE-2018-0201.
How can CVE-2018-0201 be fixed?
To fix CVE-2018-0201, it is recommended to update Cisco Jabber to a patched version provided by Cisco.

collector/nvd-index
agent/references
agent/author
agent/severity
agent/weakness
agent/tags
agent/description
agent/type
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/event
collector/mitre-cve
source/MITRE
vendor/cisco
canonical/cisco jabber
version/cisco jabber/11.9
version/cisco jabber/11.9\(.0\)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.