CVE-2017-12287

CVE-2017-12287 affects Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) Software. The issue stems from incomplete input validation of URL requests in the REST API of the CDB management component, allowing an authenticated, remote attacker to send a crafted URL that ...

PT-2017-12461

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series Software affected versions not specified Cisco TelePresence Video Communication Server VCS Software affected versions not specified Description The issue is related to incomplete input validation of URL requests by the...

CVE-2017-12287: Improper Input Validation

A vulnerability in the cluster database CDB management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server VCS Software could allow an authenticated, remote attacker to cause the CDB process on an affected system to restart unexpectedly, resulting in a...

PT-2017-16097

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series Software versions prior to X8.8.2 Cisco TelePresence VCS Software versions prior to X8.8.2 Description A vulnerability in the received packet parser could allow an unauthenticated, remote attacker to cause a reload of t...

PT-2016-7703

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series Software versions prior to X8.9 Cisco TelePresence Video Communication Server VCS versions prior to X8.9 Description A vulnerability in the HTTP traffic server component could allow an unauthenticated, remote attacker t...

CVE-2016-9207: Improper Input Validation

A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts. This does not allow for full traffic proxy through the Expressway. Affected Products: This vulnerability affects Cisco Expresswa...