CVE-2012-3935

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-09-12 · updated 2026-06-16
Weakness: CWE-119

Description

Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.

Affected products

Cisco Jabber Extensible Communications Platform: through 5.2
Cisco Unified Presence: through 8.6\(2\); 1.0, 6.0, 6.0(1), 6.0(2), 6.0(3), 6.0(4) (+25)

References

http://osvdb.org/85421
http://secunia.com/advisories/50562
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp
http://www.securitytracker.com/id?1027520
https://exchange.xforce.ibmcloud.com/vulnerabilities/78457
http://osvdb.org/85421
http://secunia.com/advisories/50562
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp
http://www.securitytracker.com/id?1027520
https://exchange.xforce.ibmcloud.com/vulnerabilities/78457

Get alerted when CVE-2012-3935 or the next vulnerability affects your stack