CVE-2016-9224

Опубликовано: 26 дек. 2016

Источник: nvd

CVSS3: 6.5

CVSS2: 6.4

EPSS Низкий

Описание

A vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to initiate connections to arbitrary hosts. More Information: CSCvc31635. Known Affected Releases: 10.6(9). Known Fixed Releases: 11.0(0).

Ссылки

http://www.securityfocus.com/bid/95016
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037516
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-jabber
Vendor Advisory
http://www.securityfocus.com/bid/95016
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037516
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-jabber
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:jabber_guest:10.0.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:jabber_guest:10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:jabber_guest:10.5.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:jabber_guest:10.6.8:*:*:*:*:*:*:*

cpe:2.3:a:cisco:jabber_guest:10.6.9:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00299

Низкий

6.5 Medium

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-977g-q8w5-59p4