Unscored severity · published Jun 24, 2015
CVE-2015-4218
The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET…
–
CVSS
2.6%
EPSS
No
On KEV
Description
The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
Jabber · Cisco
9.6(0); 9.6(1); 9.6(2); 9.6(3); 9.7(0); 9.7(1); +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4218
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4218
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=39494
Third Party Advisory
http://www.securityfocus.com/bid/75377
Third Party Advisory
http://www.securitytracker.com/id/1032711
More from Jabber
9.9
CVE-2021-1411
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the…
9.9
CVE-2020-26085
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying…
9.9
CVE-2020-27134
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying…
9.9
CVE-2020-27133
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying…
9.9
CVE-2020-27132
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying…