Telepresence Video Communication Server Software (Cisco) - vulnerabilities (CVEs)

31 CVEs, 0 in the last 30 days, 99 known versions, newest CVE from 2024-11-15. Vendor: Cisco.

CVEs of Telepresence Video Communication Server Software

CVE-2022-20853 - CVSS 7.4 (high), 2024-11-15: A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a…
CVE-2024-20252 - CVSS 9.6 (critical), 2024-02-07: Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to…
CVE-2016-1444 - CVSS 6.5 (medium), 2016-07-07: The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6…
CVE-2016-1338 - CVSS 6.5 (medium), 2016-03-12: Cisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service (VoIP outage) via a…
CVE-2016-1316 - CVSS 5.3 (medium), 2016-02-09: Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive…
CVE-2015-6410 - CVSS 4 (medium), 2015-12-14: The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows…
CVE-2015-6414 - CVSS 2.1 (low), 2015-12-13: Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers' installations, which makes it easier for…
CVE-2015-6413 - CVSS 4 (medium), 2015-12-13: Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload…
CVE-2015-6376 - CVSS 6.8 (medium), 2015-11-21: Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to hijack the…
CVE-2015-6318 - CVSS 6.9 (medium), 2015-10-12: Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink…
CVE-2015-4325 - CVSS 6.9 (medium), 2015-10-12: The process-management implementation in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges by…
CVE-2015-4330 - CVSS 6.9 (medium), 2015-09-02: A local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges for OS command execution…
CVE-2015-6261 - CVSS 4 (medium), 2015-08-26: Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictions and read…
CVE-2015-4318 - CVSS 5 (medium), 2015-08-20: Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET…
CVE-2015-4329 - CVSS 6.5 (medium), 2015-08-20: The administrator web interface in Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary OS…
CVE-2015-4319 - CVSS 5.5 (medium), 2015-08-20: The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs…
CVE-2015-4316 - CVSS 5.5 (medium), 2015-08-20: The Mobile and Remote Access (MRA) endpoint-validation feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly validates…
CVE-2015-4303 - CVSS 6.5 (medium), 2015-08-20: Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary commands in the context of the nobody user…
CVE-2015-4328 - CVSS 4 (medium), 2015-08-20: Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly checks for a user account's read-only attribute, which allows remote…
CVE-2015-4327 - CVSS 7.2 (high), 2015-08-20: The CLI in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to obtain root privileges by writing script arguments to…
CVE-2015-4320 - CVSS 4 (medium), 2015-08-20: The Configuration Log File component in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to obtain…
CVE-2015-4317 - CVSS 5 (medium), 2015-08-20: Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in an…
CVE-2015-4315 - CVSS 5.5 (medium), 2015-08-20: The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows…
CVE-2015-4314 - CVSS 4 (medium), 2015-08-20: The System Snapshot feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 allows remote authenticated users to obtain sensitive…
CVE-2015-0772 - CVSS 7.1 (high), 2015-06-12: Cisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a denial of service (CPU consumption or device outage) via a…
CVE-2015-0653 - CVSS 10 (critical), 2015-03-13: The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2…
CVE-2015-0652 - CVSS 7.8 (high), 2015-03-13: The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco…
CVE-2014-3370 - CVSS 7.1 (high), 2014-10-19: Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service (device reload)…
CVE-2014-3369 - CVSS 7.1 (high), 2014-10-19: The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cause a…
CVE-2014-3368 - CVSS 7.8 (high), 2014-10-19: Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload)…
CVE-2014-0662 - CVSS 7.1 (high), 2014-01-22: The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a…