Cisco Jabber Guest Server Multiple Cross-Site Scripting Vulnerabilities (CVE-2014-8026)

Cisco Jabber Guest Server Multiple Cross-Site Scripting Vulnerabilities (CVE-2014-8026)

Release date:
Updated on:

Affected Systems:
Cisco Jabber Guest
Description:
Bugtraq id: 71769
CVE (CAN) ID: CVE-2014-8026

Cisco Jabber Guest is a consumer-to-enterprise (C2B) solution.

A cross-site scripting vulnerability exists in the implementation of the Guest Server in Cisco Jabber. Remote attackers can inject arbitrary web scripts or HTML through the GET or POST parameters.

<* Source: Cisco
*>

Suggestion:
Vendor patch:

Cisco
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8026

This article permanently updates the link address: