Cisco Jabber Extensible Communications Platform vulnerabilities

3 CVEs affecting Cisco Jabber Extensible Communications Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1187, published 2013-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-3935, published 2012-09-12. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted…
CVE-2013-1187, published 2013-04-16. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The Connection Manager in Cisco Jabber Extensible Communications Platform (aka Jabber XCP) does not properly validate login data, which allows remote attackers to cause a denial of service (service…
CVE-2011-3287, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which…