Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug ID CSCtq78106, a similar issue to CVE-2003-1564.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Jabber Extensible Communications Platform 资源管理错误漏洞
Vulnerability Description
Cisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x到5.4.0.27581之前的5.4.x版本和5.8.1.27561之前的5.8.x版本存在资源管理错误漏洞。由于在实体扩张期间不能正确检测递归，远程攻击者可借助特制的包含大量嵌套实体参照的XML文档导致拒绝服务（内存和CPU消耗以及进程崩溃）。
CVSS Information
N/A
Vulnerability Type
N/A