CVE-2018-0199

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-22 · updated 2026-06-17
Weakness: CWE-79

Description

A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page. An attacker could exploit this vulnerability by executing arbitrary JavaScript in the Jabber client of the recipient. An exploit could allow the attacker to perform remote code execution. Cisco Bug IDs: CSCve53989.

Affected products

Cisco Jabber: 11.9, 11.9(0)

References

http://www.securityfocus.com/bid/103143
http://www.securitytracker.com/id/1040407
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-jcf
http://www.securityfocus.com/bid/103143
http://www.securitytracker.com/id/1040407
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-jcf

Get alerted when CVE-2018-0199 or the next vulnerability affects your stack