9.9

CVE-2020-3495: cisco cisco jabber Improper Input Validation

CVSS: 9.9v3.1CriticalModified
Published 04-09-2020Last modified 13-11-2024
Open JSON

Vulnerability summary

CVE-2020-3495 is a critical (CVSS 9.9) Improper Input Validation vulnerability in cisco cisco jabber. EPSS estimates a 60.54% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.9/10
010
Critical · v3.1 (CVE.org)
EPSS score
60.54%
0%100%
Critical · +0.61 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 04-09-2020
    PublishedVulnerability first disclosed.
  2. 13-11-2024
    Last modifiedVulnerability information updated.

Description

A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages to the affected software. A successful exploit could allow the attacker to cause the application to execute arbitrary programs on the targeted system with the privileges of the user account that is running the Cisco Jabber client software, possibly resulting in arbitrary code execution.

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

60.54%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

+0.61 pp

From 59.92% on 19-09-2026

19-09-202619-10-2026
EPSS score
60.54%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco2 products
  • cisco jabbern/a
  • jabber≥ 12.1, < 12.1.3 | ≥ 12.5, < 12.5.2 | ≥ 12.6, < 12.6.3 | ≥ 12.7, < 12.7.2 | ≥ 12.8, < 12.8.3 | ≥ 12.9, < 12.9.1

1 vendor · 2 products

References

1 links