TV
Product
Telepresence Video Communication Server
41
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 18Medium 18Low 0
Watch
Add Telepresence Video Communication Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1468 | 8.8 | Aug 8 | The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted… Affected: x8.5.2 |
| CVE-2019-1845 | 8.6 | Jun 5 | A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence Video Communication… Affected: x8.1 through x12.5.2 |
| CVE-2017-3790 | 8.6 | Feb 1 | A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote… Affected: x5.2_base; x6.0_base; x6.1_base; x7.0.0; x7.0.1; x7.0.2; +5 more |
| CVE-2023-20192 | 7.7 | Jun 28 | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administrator-level… Affected: through x14.0.3; through x14.0.3 |
| CVE-2020-3596 | 7.5 | Oct 8 | A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote… Affected: through x12.6.3 |
| CVE-2018-0409 | 7.5 | Aug 15 | A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video Communication Server (VCS)… Affected: x7.0.1; x7.2.4; x8.1; x8.2.2; x8.5; x8.6; +5 more |
| CVE-2018-0358 | 7.5 | Jun 21 | A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticated, remote attacker to cause a denial… Affected: All versions, or not specified |
| CVE-2016-1400 | 7.5 | May 25 | Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via a crafted URI in a SIP… Affected: x8.1.1; x8.1.2; x8.1_base; x8.2.1; x8.2.2; x8.2_base; +7 more |
| CVE-2022-20853 | 7.4 | Nov 15 | A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: x8.1; x8.1.1; x8.1.2; x8.2; x8.2.1; x8.2.2; +34 more |
| CVE-2022-20814 | 7.4 | Nov 15 | A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized… Affected: x8.1; x8.1.1; x8.1.2; x8.2; x8.2.1; x8.2.2; +34 more |
| CVE-2023-20209 | 7.2 | Aug 16 | A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote… Affected: before 14.3.1; before 14.3.1 |
| CVE-2022-20755 | 7.2 | Apr 6 | Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an… Affected: before 14.0.5 |
| CVE-2022-20754 | 7.2 | Apr 6 | Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an… Affected: before 14.0.5 |
| CVE-2021-34716 | 7.2 | Aug 18 | A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote… Affected: x8.6 through x14.0.3 |
| CVE-2021-34715 | 7.2 | Aug 18 | A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker… Affected: through x8.8 |
| CVE-2011-2538 | 7.2 | Oct 29 | Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands Affected: before x7.0.3 |
| CVE-2018-15430 | 7.2 | Oct 5 | A vulnerability in the administrative web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote… Affected: x7.2.4; x8.9.2; x8.10.4 |
| CVE-2022-20806 | 7.1 | May 27 | Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an… Affected: through x14.0.7 |
| CVE-2017-6790 | 6.8 | Aug 17 | A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a… Affected: x8.7; x8.7.1; x8.7.2; x8.7.3; x8.8; x8.9 |
| CVE-2024-20492 | 6.7 | Oct 2 | A vulnerability in the restricted shell of Cisco Expressway Series could allow an authenticated, local attacker to perform command injection attacks on the underlying operating… Affected: x8.1; x8.1.1; x8.1.2; x8.2; x8.2.1; x8.2.2; +34 more |
| CVE-2023-20105 | 6.5 | Jun 28 | A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote… Affected: through x14.0.3; through x14.0.3 |
| CVE-2022-20812 | 6.5 | Jul 6 | Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a… Affected: before x14.0.7 |
| CVE-2022-20807 | 6.5 | May 27 | Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an… Affected: through x14.0.7 |
| CVE-2022-20809 | 6.5 | May 26 | Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an… Affected: through x14.0.7 |
| CVE-2020-3482 | 6.5 | Nov 18 | A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an unauthenticated, remote attacker to bypass security… Affected: before x12.6.3 |
| CVE-2019-1722 | 6.5 | Apr 18 | A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct… Affected: before x12.5.1 |
| CVE-2019-1721 | 6.5 | Apr 18 | A vulnerability in the phone book feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause… Affected: before x12.5.1 |
| CVE-2016-1444 | 6.5 | Jul 7 | The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates,… Affected: x8.1; x8.1.1; x8.1.2; x8.2; x8.2.1; x8.2.2; +8 more |
| CVE-2019-12705 | 6.1 | Oct 16 | A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote… Affected: before x12.5.4 |
| CVE-2022-20813 | 5.9 | Jul 6 | Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a… Affected: before x14.0.7 |
| CVE-2019-1872 | 5.3 | Jun 5 | A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow an unauthenticated, remote attacker to cause an affected… Affected: before x12.5 |
| CVE-2019-1679 | 5.0 | Feb 7 | Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability Affected: before x12.5 |
| CVE-2019-1720 | 4.9 | Apr 18 | A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause the CPU to… Affected: before x12.5.1 |
| CVE-2024-20400 | 4.7 | Jul 17 | A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page Affected: x8.1; x8.1.1; x8.1.2; x8.2; x8.2.1; x8.2.2; +34 more |
| CVE-2019-1854 | 4.3 | May 3 | A vulnerability in the management web interface of Cisco Expressway Series could allow an authenticated, remote attacker to perform a directory traversal attack against an… Affected: x8.11.4 |
| CVE-2017-12287 | 4.3 | Oct 19 | A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software could allow… Affected: All versions, or not specified |
| CVE-2015-0752 | – | May 29 | Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted… Affected: x8.5.1 |
| CVE-2015-0579 | – | Jan 14 | Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memory and CPU consumption, and partial outage) via… Affected: All versions, or not specified |
| CVE-2014-0675 | – | Jan 23 | The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it… Affected: All versions, or not specified |
| CVE-2012-0331 | – | Mar 1 | Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP packet, as… Affected: All versions, or not specified |
| CVE-2012-0330 | – | Mar 1 | Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a malformed SIP message, aka Bug… Affected: All versions, or not specified |
Showing 41