CVE-2016-1468: Improper Neutralization of Special Elements used in an OS Command

The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531...

CVE-2016-1468

The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531...

Cisco TelePresence Video Communication Server Expressway Command Injection Vulnerability

Cisco TelePresence Video Communication Server Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end-users using a variety of communication tools. A remote...

PT-2016-2319

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server versions X8.1 through X8.7 Expressway versions X8.1 through X8.6 Description The issue exists due to insufficient input validation in the Mobile and Remote Access MRA component of the Cisco...

CVE-2016-1444: Improper Input Validation

The Mobile and Remote Access MRA component in Cisco TelePresence Video Communication Server VCS X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601...

Cisco TelePresence Video Communication Server Denial of Service Vulnerability

Cisco TelePresence Video Communication Server VCS is a telepresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A security...

CVE-2016-1338

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

CVE-2016-1338

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

PT-2016-1471

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS versions X8.5.1 through X8.5.2 Description The issue is caused by insufficient input validation in the device's software, allowing a remote attacker to cause a denial of service VoIP outage via...

CVE-2016-1338: Improper Input Validation

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

Cisco TelePresence Video Communication Server Information Disclosure

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain statistical data about calls through a specially crafte...

CVE-2016-1316

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

PT-2016-1194

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS versions X8.1 through X8.7 Description The issue is related to the lack of protection for service data, allowing remote attackers to obtain sensitive call-statistics information via a direct...

CVE-2016-1316: Exposure of Sensitive Information to an Unauthorized Actor

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

SA110 : Java Deserialization Vulnerabilities

SUMMARY Blue Coat products that deserialize unsafe Java objects from untrusted sources are susceptible to one or more vulnerabilities. A remote attacker can exploit these vulnerabilities to cause the target to execute arbitrary code. AFFECTED PRODUCTS Cloud Data Protection for Salesforce CDP-SFDC...

Cisco TelePresence Video Communication Server Expressway Unauthorized Access Vulnerability

Cisco TelePresence Video Communication Server is a telepresence video communication server from Cisco. Cisco TelePresence Video Communication Server VCS Expressway X8.6 has a security vulnerability in its implementation, which can be exploited by an authenticated remote user to bypass the target...

PT-2015-7238

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS version X8.6 Description The issue allows local users to defeat cryptographic protection mechanisms by leveraging knowledge of an encryption key from another installation, as the same encryptio...

PT-2015-7237

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS Expressway version X8.6 Description The issue allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package TLP files by visiting an administrati...

CVE-2015-6413: Undefined Security Weakness

Cisco TelePresence Video Communication Server VCS Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package TLP files by visiting an administrative page, aka Bug ID CSCuw55651...

CVE-2015-6414: Exposure of Sensitive Information to an Unauthorized Actor

Cisco TelePresence Video Communication Server VCS X8.6 uses the same encryption key across different customers' installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of a key from another installation, aka Bug ID CSCuw64516...