The vulnerability of the Simple Object Access Protocol component in the Cisco TelePresence Management Suite software for centralized control of video systems allows a perpetrator to gain access to control tools.

The vulnerability of the Simple Object Access Protocol component in the Cisco TelePresence Management Suite software for centralized control of video systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to control tools...

The vulnerability in the web interface of software for Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the software web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server lies in insufficiently checking incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of...

Cisco TelePresence Video Communication Server (VCS) Cross-Site Request Forgery Vulnerability

Cisco TelePresence Video Communication Server is a video server developed by Cisco. Cisco TelePresence Video Communication Server suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to submit a special request and execute arbitrary code...

Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability (CNVD-2019-04920)

Cisco TelePresence Management Suite is a Cisco video server management program. A cross-site scripting vulnerability exists in Cisco TelePresence Management Suite, which can be exploited by remote attackers to inject malicious script or HTML code...

Cisco TelePresence Management Suite SOAP Unauthorized Access Vulnerability

Cisco TelePresence Management Suite is a video server management program developed by Cisco. An unauthorized access vulnerability exists in Cisco TelePresence Management Suite SOPA, which can be exploited by a remote attacker to submit a special request for unauthorized access...

Cross site scripting

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is d...

CVE-2019-1661

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is d...

CVE-2019-1661

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is d...

CVE-2019-1660 Cisco TelePresence Management Suite Simple Object Access Protocol Vulnerability

A vulnerability in the Simple Object Access Protocol SOAP of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to a lack of proper access and authentication controls on the...

CVE-2019-1661

CVE-2019-1661 affects Cisco TelePresence Management Suite (TMS) web-based management interface. The vulnerability is an unauthenticated XSS caused by insufficient validation of user-supplied input, exploitable when a user clicks a malicious link, allowing arbitrary script execution in the interfa...

CVE-2019-1660 Cisco TelePresence Management Suite Simple Object Access Protocol Vulnerability

A vulnerability in the Simple Object Access Protocol SOAP of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to a lack of proper access and authentication controls on the...

CVE-2019-1660

Cisco TelePresence Management Suite (TMS) SOAP vulnerability (CVE-2019-1660) allows unauthenticated remote access to affected devices due to insufficient access controls on the SOAP interface. The issue enables an attacker on internal trusted networks to send crafted SOAP requests and gain access...

CVE-2019-1661 Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is d...

Authentication flaw

A vulnerability in the Simple Object Access Protocol SOAP of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to a lack of proper access and authentication controls on the...

Server side request forgery (ssrf)

A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server VCS Software could allow an authenticated, remote attacker to trigger an HTTP request from an affected server to an arbitrary host. This type of attack ...

CVE-2019-1660

A vulnerability in the Simple Object Access Protocol SOAP of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to a lack of proper access and authentication controls on the...

CVE-2019-1660

A vulnerability in the Simple Object Access Protocol SOAP of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to a lack of proper access and authentication controls on the...

CVE-2019-1679

A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server VCS Software could allow an authenticated, remote attacker to trigger an HTTP request from an affected server to an arbitrary host. This type of attack ...

CVE-2019-1679

A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server VCS Software could allow an authenticated, remote attacker to trigger an HTTP request from an affected server to an arbitrary host. This type of attack ...

CVE-2019-1679 Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability

A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server VCS Software could allow an authenticated, remote attacker to trigger an HTTP request from an affected server to an arbitrary host. This type of attack ...