Telepresence Video Communication Server (Cisco) - vulnerabilities (CVEs)

39 CVEs, 0 in the last 30 days, 178 known versions, newest CVE from 2024-11-15. Vendor: Cisco.

CVEs of Telepresence Video Communication Server

CVE-2022-20853 - CVSS 7.4 (high), 2024-11-15: A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a…
CVE-2022-20814 - CVSS 7.4 (high), 2024-11-15: A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to…
CVE-2024-20492 - CVSS 6.7 (medium), 2024-10-02: A vulnerability in the restricted shell of Cisco Expressway Series could allow an authenticated, local attacker to perform command injection attacks on the…
CVE-2024-20400 - CVSS 4.7 (medium), 2024-07-17: A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a…
CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
CVE-2023-20209 - CVSS 7.2 (high), 2023-08-16: A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an…
CVE-2023-20192 - CVSS 9.6 (critical), 2023-06-28: Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with…
CVE-2023-20105 - CVSS 9.6 (critical), 2023-06-28: A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an…
CVE-2022-20813 - CVSS 9 (critical), 2022-07-06: Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server…
CVE-2022-20812 - CVSS 9 (critical), 2022-07-06: Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server…
CVE-2022-20807 - CVSS 6.5 (medium), 2022-05-27: Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS)…
CVE-2022-20806 - CVSS 7.1 (high), 2022-05-27: Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS)…
CVE-2022-20809 - CVSS 6.5 (medium), 2022-05-26: Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS)…
CVE-2022-20755 - CVSS 9 (critical), 2022-04-06: Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS)…
CVE-2022-20754 - CVSS 9 (critical), 2022-04-06: Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS)…
CVE-2021-34715 - CVSS 7.2 (high), 2021-08-18: A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an…
CVE-2021-34716 - CVSS 7.2 (high), 2021-08-18: A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an…
CVE-2020-3482 - CVSS 6.5 (medium), 2020-11-18: A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an unauthenticated, remote attacker…
CVE-2020-3596 - CVSS 7.5 (high), 2020-10-08: A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an…
CVE-2011-2538 - CVSS 7.2 (high), 2019-10-29: Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute…
CVE-2019-12705 - CVSS 6.1 (medium), 2019-10-16: A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an…
CVE-2019-1872 - CVSS 5.3 (medium), 2019-06-05: A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow an unauthenticated, remote attacker to…
CVE-2019-1845 - CVSS 8.6 (high), 2019-06-05: A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence…
CVE-2019-1854 - CVSS 4.3 (medium), 2019-05-03: A vulnerability in the management web interface of Cisco Expressway Series could allow an authenticated, remote attacker to perform a directory traversal…
CVE-2019-1722 - CVSS 6.5 (medium), 2019-04-18: A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated,…
CVE-2019-1720 - CVSS 6.8 (medium), 2019-04-18: A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote…
CVE-2019-1721 - CVSS 7.7 (high), 2019-04-18: A vulnerability in the phone book feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated,…
CVE-2019-1679 - CVSS 5 (medium), 2019-02-07: A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server (VCS)…
CVE-2018-15430 - CVSS 7.2 (high), 2018-10-05: A vulnerability in the administrative web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an…
CVE-2018-0409 - CVSS 7.5 (high), 2018-08-15: A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video…
CVE-2018-0358 - CVSS 7.5 (high), 2018-06-21: A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticated, remote…
CVE-2017-12287 - CVSS 4.3 (medium), 2017-10-19: A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS)…
CVE-2017-6790 - CVSS 6.8 (medium), 2017-08-17: A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote…
CVE-2017-3790 - CVSS 8.6 (high), 2017-02-01: A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an…
CVE-2016-1468 - CVSS 8.8 (high), 2016-08-08: The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary…
CVE-2016-1444 - CVSS 6.5 (medium), 2016-07-07: The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6…
CVE-2016-1400 - CVSS 7.5 (high), 2016-05-25: Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via a…
CVE-2015-0752 - CVSS 4.3 (medium), 2015-05-29: Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arbitrary web script…
CVE-2015-0579 - CVSS 5 (medium), 2015-01-14: Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memory and CPU consumption, and…
CVE-2014-0675 - CVSS 6.4 (medium), 2014-01-23: The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers'…
CVE-2012-0331 - CVSS 7.5 (high), 2012-03-01: Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a crafted…
CVE-2012-0330 - CVSS 7.8 (high), 2012-03-01: Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a malformed…