CVE-2010-1355: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on the TANDBERG Video Communication Server VCS before X5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Reference ID 66316...

CVE-2009-4511: Exposure of Sensitive Information to an Unauthorized Actor

Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server VCS before X5.1 allow remote authenticated users to read arbitrary files via a .. dot dot in the page parameter to 1 helppage.php or 2 user/helppage.php...

CVE-2010-1356: Undefined Security Weakness

Unspecified vulnerability on the TANDBERG Video Communication Server VCS before X5.0 allows remote attackers to execute arbitrary code via unknown vectors, aka Reference ID 69773...

CVE-2009-4510: Undefined Security Weakness

The SSH service on the TANDBERG Video Communication Server VCS before X5.1 uses a fixed DSA key, which makes it easier for remote attackers to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted SSH packets...

TANDBERG Video Communication Server 4.2.14.3.0 - Multiple Remote Vulnerabilities

TANDBERG Video Communication Server 4.2.14.3.0 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/39389/info TANDBERG Video Communication Server is prone to multiple remote vulnerabilities, including: 1. A file-disclosure vulnerability. 2. A security vulnerability that ma...

TANDBERG Video Communication Server 4.2.1/4.3.0 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/39389/info TANDBERG Video Communication Server is prone to multiple remote vulnerabilities, including: 1. A file-disclosure vulnerability. 2. A security vulnerability that may allow attackers to conduct server impersonation and man-in-middle attacks. 3. A...