Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoTelepresence Video Communication Server

14 matches found

CVE
CVE•added 2024/11/15 4:15 p.m.•7479 views

CVE-2022-20853

A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management ...

7.4CVSS7.6AI score0.00444EPSS
CVE
CVE•added 2024/11/15 4:15 p.m.•6569 views

CVE-2022-20814

A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receiv...

7.4CVSS7.5AI score0.00226EPSS
CVE
CVE•added 2023/10/10 2:15 p.m.•4497 views

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

7.5CVSS8AI score0.94456EPSS
CVE
CVE•added 2022/05/27 2:15 p.m.•861 views

CVE-2022-20806

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about...

7.1CVSS5.8AI score0.00169EPSS
CVE
CVE•added 2023/08/16 9:15 p.m.•116 views

CVE-2023-20209

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code...

7.2CVSS7.5AI score0.3123EPSS
CVE
CVE•added 2020/10/08 5:15 a.m.•84 views

CVE-2020-3596

A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect handl...

7.8CVSS6.6AI score0.00596EPSS
CVE
CVE•added 2019/04/18 1:29 a.m.•67 views

CVE-2019-1721

A vulnerability in the phone book feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service (DoS) condition on an affected system. The vulnera...

7.7CVSS6.4AI score0.00437EPSS
CVE
CVE•added 2018/08/15 8:29 p.m.•66 views

CVE-2018-0409

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video Communication Server (VCS) and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users, ...

7.5CVSS7.6AI score0.01042EPSS
CVE
CVE•added 2017/08/17 8:29 p.m.•56 views

CVE-2017-6790

A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the targeted appliance. The vulnerability is due to excessive SIP traffic sent to the d...

7.1CVSS6.6AI score0.01795EPSS
CVE
CVE•added 2016/05/25 1:59 a.m.•45 views

CVE-2016-1400

Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via a crafted URI in a SIP header, aka Bug ID CSCuy43258.

7.5CVSS7.2AI score0.01315EPSS
CVE
CVE•added 2012/03/01 1:55 a.m.•42 views

CVE-2012-0330

Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a malformed SIP message, aka Bug ID CSCtr20426.

7.8CVSS6.7AI score0.00427EPSS
CVE
CVE•added 2012/03/01 1:55 a.m.•41 views

CVE-2012-0331

Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP packet, as demonstrated by a SIP INVITE message from a Tandberg device, aka Bug ID CSCtq73319.

7.5CVSS6.7AI score0.0046EPSS
CVE
CVE•added 2018/10/05 2:29 p.m.•41 views

CVE-2018-15430

A vulnerability in the administrative web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with user-level privileges on the underlying operating system. The vulnerability is due to insufficien...

7.2CVSS7.1AI score0.01581EPSS
CVE
CVE•added 2018/06/21 11:29 a.m.•40 views

CVE-2018-0358

A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to exhaustion of file descriptors while processing a high volume o...

7.5CVSS7.5AI score0.01673EPSS