Cisco TelePresence Video Communication Server File Read DoS

The vulnerability of the Call Policy Configuration module in the Cisco TelePresence Video Communication Server software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files or trigger a service failure using specially...

PT-2015-1956

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server versions prior to a fixed version Description The issue exists due to insufficient input validation on the Call Policy Configuration page of the Cisco TelePresence Video Communication Server. This...

CVE-2015-4315: Improper Input Validation

The Call Policy Configuration page in Cisco TelePresence Video Communication Server VCS Expressway X8.5.3 improperly validates external DTDs, which allows remote authenticated users to read arbitrary files or cause a denial of service via a crafted XML document, aka Bug ID CSCuv31853...