EX
Product
Expressway
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 5Low 0
Watch
Add Expressway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20254 | 8.8 | Feb 7 | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site… Affected: through 15.0 |
| CVE-2024-20252 | 8.8 | Feb 7 | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site… Affected: through 15.0 |
| CVE-2017-3790 | 8.6 | Feb 1 | A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote… Affected: x8.1.0; x8.1.1; x8.1.2; x8.1_base; x8.2.1; x8.2.2; +15 more |
| CVE-2020-3596 | 7.5 | Oct 8 | A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote… Affected: through x12.6.3 |
| CVE-2018-5390 | 7.5 | Aug 6 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service Affected: x8.10; x8.10.1; x8.10.2; x8.10.3; x8.10.4; x8.11 |
| CVE-2021-34716 | 7.2 | Aug 18 | A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote… Affected: x8.6.0 before x14.1 |
| CVE-2021-34715 | 7.2 | Aug 18 | A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker… Affected: through x8.8.0 |
| CVE-2024-20255 | 7.1 | Feb 7 | A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a… Affected: before 15.0 |
Showing 8
