CVE Daily

CVE-2014-8025

The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote a...

Medium CVSS 4.3

Overview

The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST response, aka Bug ID CSCus19801.

CWE: CWE-200 Published: 2014-12-23T02:59:05.670
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.3 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags