The host is installed with Cisco Jabber 12.1.x before 12.1.3, 12.5.x before 12.5.2, 12.6.x before 12.6.3, 12.7.x before 12.7.2, 12.8.x before 12.8.3 or 12.9.x before 12.9.1 and is prone to a command injection vulnerability. A flaw is present in application, which fails to properly handle an issue in application protocol. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary commands.