Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2020-3495

A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages to the affected software. A successful exploit could allow the attacker to cause the application to execute arbitrary programs on the targeted system with the privileges of the user account that is running the Cisco Jabber client software, possibly resulting in arbitrary code execution.

CVSS 9.9 · CriticalBuzz score 25.9

Buzz score

Why this CVE is surfacing

Buzz score total 25.9

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 17.9 · diversity 8.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
17.9
5 evidence mentions in the snapshot
Diversity score
8.0
3 sources across 1 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
5 source links · newest first
  • Cisco addresses critical RCE vulnerability in JabberSecurity Affairs

    Cisco addressed a new critical RCE vulnerability that affects several versions of Cisco Jabber for Windows, macOS, and mobile platforms. Cisco has released security updates to address a critical remote code execution (RCE) flaw affecting several versions of Cisco Jabber for Windows, macOS, and mobile platforms. Cisco Jabber is an instant messaging and web conferencing desktop app that […]

    newssecurityaffairs.comDec 10, 2020, 7:46 PM
  • Cisco Patches Critical Vulnerability in Jabber for WindowsSecurityWeek

    Cisco last week released patches to address a critical remote code execution vulnerability in Jabber for Windows.

    newswww.securityweek.comSep 7, 2020, 2:22 PM
  • Week in review: Costliest cybersecurity failures, DNS hijacking protection, AWS security automationHelp Net Security

    Here’s an overview of some of last week’s most interesting news, interviews and articles: Cisco patches critical, wormable RCE flaw in Cisco Jabber Cisco has patched four vulnerabilities in its Jabber client for Windows, the most critical of which (CVE-2020-3495) could allow attackers to achieve remote code execution by sending specially crafted chat messages. September 2020 Patch Tuesday forecast: Back to school? Another month has passed working from home and September Patch Tuesday is upon … More →

    newswww.helpnetsecurity.comSep 6, 2020, 7:55 AM
  • Cisco patches critical, wormable RCE flaw in Cisco JabberHelp Net Security

    Cisco has patched four vulnerabilities in its Jabber client for Windows, the most critical of which (CVE-2020-3495) could allow attackers to achieve remote code execution by sending specially crafted chat messages. “No user interaction is required, and the vulnerability can be exploited even when Cisco Jabber is running in the background,” Oslo-based cybersecurity company Watchcom explained. That particular flaw is also wormable, they say. CVE-2020-3495 Cisco Jabber is a video conferencing and instant messaging application … More →

    newswww.helpnetsecurity.comSep 3, 2020, 9:49 AM
  • Cisco addresses critical code execution flaw in Cisco Jabber for WindowsSecurity Affairs

    Cisco addressed a critical remote code execution vulnerability affecting multiple versions of its Cisco Jabber for Windows operating system. Cisco has addressed a critical severity remote code execution flaw, tracked as CVE-2020-3495, that affects multiple versions of Cisco Jabber for Windows. Cisco Jabber for Windows is a desktop collaboration client that integrates users with presence, audion, video […]

    newssecurityaffairs.comSep 2, 2020, 9:13 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence
  • CVE-2021-1570

    Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause…

    CVSS 6.5 · Medium
  • CVE-2021-1569

    Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause…

    CVSS 6.5 · Medium
  • CVE-2021-1469

    Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the un…

    CVSS 9.9 · Critical
    2 mentions
  • CVE-2020-3498

    A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of…

    CVSS 6.5 · Medium
    1 mention
  • CVE-2019-12645

    A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to exec…

    CVSS 7.8 · High
  • CVE-2017-12286

    A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead…

    CVSS 5.5 · Medium