by Kastro
Paper/Archive/CVE-2020-27127

CVE-2020-27127

Cisco Cisco Jabber — Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

EPSS 1%CVSS 9.9
critical.is priorityof 100
44
CVSS 9.9 (CNA, NVD agree)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 71.5.715 × 2014.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.

Affected

ProductAffectedFixed inSource
Cisco Jabbern/a–CNA

Scores by source

cisco (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorytools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO