CVE-2014-8024: The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers t...

Security readout for executives and security teams

CVE-2014-8024 is an information disclosure issue in Cisco Jabber Guest Server. When its HTML5 CORS feature is used, sensitive API information could be exposed through HTTP GET or POST traffic observable on the network. The source bundle does not provide severity scoring or confirmed active exploitation. Exposure is most likely where Cisco Jabber Guest Server is still deployed, the HTML5 CORS feature is enabled, and API requests traverse observable HTTP network paths. The supplied affected-products data is incomplete. Treat this as a targeted legacy-product exposure question, not a broad emergency. Prioritize confirming whether the product still exists in the environment, then follow Cisco guidance if found. Mitigation focus: Review Cisco advisory guidance for CSCus19789 before making production changes.; Inventory any Cisco Jabber Guest Server deployments and ownership.; Confirm whether HTML5 CORS is enabled on remaining deployments..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.