CVE-2012-3935
Estado: ModificadaAlta (7.8)—
Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.77%
- Percentil entre todas las CVEs puntuadas: 86
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-119
Referencias
- http://osvdb.org/85421
- http://secunia.com/advisories/50562
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp
- http://www.securitytracker.com/id?1027520
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78457
- http://osvdb.org/85421
- http://secunia.com/advisories/50562
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp
- http://www.securitytracker.com/id?1027520
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78457
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-3935",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-09-12T23:55:00.807",
"references": [
{
"url": "http://osvdb.org/85421",
"source": "psirt@cisco.com"
},
{
"url": "http://secunia.com/advisories/50562",
"source": "psirt@cisco.com"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp",
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id?1027520",
"source": "psirt@cisco.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78457",
"source": "psirt@cisco.com"
},
{
"url": "http://osvdb.org/85421",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/50562",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1027520",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78457",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832."
},
{
"lang": "es",
"value": "Cisco Unified Presence (CUP) antes de v8.6 (3) y Jabber Extensible Communications Platform (también conocido como Jabber XCP) antes de v5.3, permite a atacantes remotos provocar una denegación de servicio (caída del proceso) a través de una cabecera XMPP modificada, también conocido como Bug ID CSCtu32832."
}
],
"lastModified": "2026-06-16T23:44:05.813",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:unified_presence:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF489778-059A-4D9C-A892-3695BC0795BB",
"versionEndIncluding": "8.6\\(2\\)"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53DFD5A1-33C9-45E5-B7B9-2B1FAA840ED4"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C9B1A89-6A54-4BA7-9980-3EB46C650FFC"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:6.0\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EBA6C36-8B78-45DF-B73E-326F6C72B6C6"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:6.0\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7358448-71EA-49E7-BAAD-30B3F82C5A14"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:6.0\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D425ACC6-F347-4106-8E1C-B95E9D82C21A"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:6.0\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EBDC5EE-18F6-4C98-B815-1E14351EAD1F"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:6.0\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "309E650A-7907-4E57-B571-4B072E62A1EE"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:6.0\\(6\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10AD3A1E-D9A2-4B90-A09A-2596B09B2F92"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:6.0\\(7\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9122B9CF-CDB8-448E-B9E4-6613D4B401BE"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:6.0_1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36C86548-FAC6-49A3-9D3B-3107A7916086"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:6.0_2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49F5F5FC-E41A-46F2-B168-FDF48F56ACBE"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D88C06B5-BD50-4A43-9B51-5D3D91F691F7"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:7.0\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "194B6B31-58FD-42F9-BAAD-6D539D2DE445"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:7.0\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61B1C092-C3D4-4BCF-8F16-27978150076A"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:7.0\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01BD934F-DC42-43CF-8B69-1B98D2CE5787"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:7.0\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94BB2FB8-F54D-42B0-B8D9-37253D8A7794"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:7.0\\(5\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CE37DDB-11FC-41B5-A9CB-60825ED8EC21"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:7.0\\(6\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "325098C4-4AA0-43CF-A421-126D8BC05661"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:7.0\\(7\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA453950-82A8-4374-8655-B3C7662074AA"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:7.0\\(8\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "202EB97F-B4D4-4269-9FE6-E11A637C2C0E"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:7.0\\(9\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C8B9CA0-3F44-4B5C-A8EE-BD8BC90FD076"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7915D1A-5B9C-4D72-A6A8-C77BBDE40F68"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:8.0\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF088815-90E1-4A74-9EF2-BC3F0C8CFEF5"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:8.0\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8F1A6C5-5150-4080-AE51-36432DC293E0"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:8.0\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A5D87B2-E85D-4A28-9EFF-9408FDB35B92"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:8.0\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60A36A8C-4CDD-4251-82F5-083C5BA1132A"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7329B46-66E8-4429-8664-8DB94DBD3134"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:8.5\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7320D823-9FCA-4624-8F94-FB2A6081BA87"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:8.5\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26D3FA4B-E9A5-413B-B13D-61EE62AA0444"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:8.5\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AACEEBD1-DB8B-457B-9E18-6BC1E8BD6B66"
},
{
"criteria": "cpe:2.3:a:cisco:unified_presence:8.6\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67F1CFA0-8D7C-4CA3-8E44-9B1BA94E8FB8"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:jabber_extensible_communications_platform:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05E13F0E-2877-4D62-B1B7-6A57BEA5E29F",
"versionEndIncluding": "5.2"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}