EX
Product
Expressway
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 5Low 0
Watch
Add Expressway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20254 | 8.8 | Feb 7 | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site… Affected: through 15.0 |
| CVE-2024-20252 | 8.8 | Feb 7 | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site… Affected: through 15.0 |
| CVE-2017-3790 | 8.6 | Feb 1 | A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote… Affected: x8.1.0; x8.1.1; x8.1.2; x8.1_base; x8.2.1; x8.2.2; +15 more |
| CVE-2020-3596 | 7.5 | Oct 8 | A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote… Affected: through x12.6.3 |
| CVE-2018-5390 | 7.5 | Aug 6 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service Affected: x8.10; x8.10.1; x8.10.2; x8.10.3; x8.10.4; x8.11 |
| CVE-2021-34716 | 7.2 | Aug 18 | A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote… Affected: x8.6.0 before x14.1 |
| CVE-2021-34715 | 7.2 | Aug 18 | A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker… Affected: through x8.8.0 |
| CVE-2024-20255 | 7.1 | Feb 7 | A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a… Affected: before 15.0 |
| CVE-2022-20812 | 6.5 | Jul 6 | Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a… Affected: before x14.0.7 |
| CVE-2020-3482 | 6.5 | Nov 18 | A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an unauthenticated, remote attacker to bypass security… Affected: before x12.6.3 |
| CVE-2016-9207 | 6.5 | Dec 14 | A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts Affected: x8.7.2; x8.8.3 |
| CVE-2022-20813 | 5.9 | Jul 6 | Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a… Affected: before x14.0.7 |
| CVE-2017-12287 | 4.3 | Oct 19 | A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software could allow… Affected: All versions, or not specified |
Showing 13