{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:39:18Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20110928-xcpcupsxml","slug":"cisco-sa-20110928-xcpcupsxml","vendor":"Cisco","title":"Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability","summary":"A denial of service (DoS) vulnerability exists in Jabber Extensible Communications Platform (Jabber XCP) and Cisco Unified Presence. An unauthenticated, remote attacker could exploit this vulnerability by sending malicious XML to an affected server. Successful exploitation of this vulnerability could cause elevated memory and CPU utilization, resulting in memory exhaustion and process crashes. Repeated exploitation could result in a sustained DoS condition. There are no workarounds available to mitigate exploitation of this vulnerability. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-xcpcupsxml.","severity":"High","published_at":"2011-09-28T16:00:00Z","updated_at":"2012-07-18T14:37:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-xcpcupsxml","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20110928-xcpcupsxml/csaf/cisco-sa-20110928-xcpcupsxml.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":2,"visible_product_count":2,"public_evidence_count":4,"kev_count":0,"highest_epss":0.01768},"cves":[{"id":"CVE-2011-3288","kev":false,"epss":{"score":0.01768,"percentile":0.75649,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2011-3287","kev":false,"epss":{"score":0.01205,"percentile":0.6491,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Jabber Extensible Communications Platform (Jabber XCP)","slug":"cisco-jabber-extensible-communications-platform-jabber-xcp","vendor":"Cisco"},"cve":{"id":"CVE-2011-3288"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:08:06Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Jabber Extensible Communications Platform (Jabber XCP)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01768,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2011-09-28T16:00:00Z","updated_at":"2012-07-18T14:37:00Z","advisory_updated_at":"2012-07-18T14:37:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-xcpcupsxml","row_display_order":1},{"product":{"name":"Cisco Unified Presence Server","slug":"cisco-unified-presence-server","vendor":"Cisco"},"cve":{"id":"CVE-2011-3288"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:08:06Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Presence Server","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01768,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2011-09-28T16:00:00Z","updated_at":"2012-07-18T14:37:00Z","advisory_updated_at":"2012-07-18T14:37:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-xcpcupsxml","row_display_order":2},{"product":{"name":"Cisco Jabber Extensible Communications Platform (Jabber XCP)","slug":"cisco-jabber-extensible-communications-platform-jabber-xcp","vendor":"Cisco"},"cve":{"id":"CVE-2011-3287"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:08:06Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Jabber Extensible Communications Platform (Jabber XCP)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01205,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2011-09-28T16:00:00Z","updated_at":"2012-07-18T14:37:00Z","advisory_updated_at":"2012-07-18T14:37:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-xcpcupsxml","row_display_order":3},{"product":{"name":"Cisco Unified Presence Server","slug":"cisco-unified-presence-server","vendor":"Cisco"},"cve":{"id":"CVE-2011-3287"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:08:06Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Presence Server","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01205,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2011-09-28T16:00:00Z","updated_at":"2012-07-18T14:37:00Z","advisory_updated_at":"2012-07-18T14:37:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-xcpcupsxml","row_display_order":4}]}