Cisco has fixed four previously disclosed critical bugs in its Jabber video conferencing and messaging app. The flaws, if successfully exploited, could allow an authenticated, remote attacker to execute arbitrary code on target systems. The new flaws were uncovered after one of its clients requested a verification audit of the patch. They were reported to the networking equipment maker on September 25 by Watchcom, three weeks after the Norwegian cybersecurity firm publicly disclosed multiple security shortcomings in Jabber that were found during a penetration test for a client in June.
Source: https://thehackernews.com/2020/12/cisco-reissues-patches-for-critical.html