Home/Product/cisco telepresence video communication server
Product

cisco telepresence video communication server

42 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2022-20853
all versions
A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, re
7.4HIGH
 CVE-2022-20814
all versions
A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenti
7.4HIGH
 CVE-2024-20492
all versions
A vulnerability in the restricted shell of Cisco Expressway Series could allow an authenticated, local attacker to perform command
6.0MEDIUM
 CVE-2024-20400
all versions
A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker t
4.7MEDIUM
 CVE-2023-44487
< x14.3.3
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams q
7.5HIGH
 CVE-2023-20209
< 14.3.1
A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server
6.5MEDIUM
 CVE-2023-20192
<= x14.0.3
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authent
9.6CRITICAL
 CVE-2023-20105
<= x14.0.3
A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server
9.6CRITICAL
 CVE-2022-20813
< x14.0.7
Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Vi
9.0CRITICAL
 CVE-2022-20812
< x14.0.7
Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Vi
9.0CRITICAL
 CVE-2022-20807
<= x14.0.7
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Co
4.3MEDIUM
 CVE-2022-20806
<= x14.0.7
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Co
4.3MEDIUM
 CVE-2022-20809
<= x14.0.7
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Co
4.3MEDIUM
 CVE-2022-20755
< 14.0.5
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Co
9.0CRITICAL
 CVE-2022-20754
< 14.0.5
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Co
9.0CRITICAL
 CVE-2021-34716
>= x8.6 and <= x14.0.3
A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server
6.7MEDIUM
 CVE-2021-34715
<= x8.8
A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (V
4.7MEDIUM
 CVE-2020-3482
< x12.6.3
A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an unaut
6.5MEDIUM
 CVE-2020-3596
<= x12.6.3
A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Ser
5.9MEDIUM
 CVE-2011-2538
< x7.0.3
Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticate
7.2HIGH
 CVE-2019-12705
< x12.5.4
A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server
6.1MEDIUM
 CVE-2019-1872
< x12.5
A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow an unauthe
5.3MEDIUM
 CVE-2019-1845
>= x8.1 and <= x12.5.2
A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&amp;P) Se
8.6HIGH
 CVE-2019-1854
all versions
A vulnerability in the management web interface of Cisco Expressway Series could allow an authenticated, remote attacker to perfor
4.1MEDIUM
 CVE-2019-1722
< x12.5.1
A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could all
6.5MEDIUM
 CVE-2019-1721
< x12.5.1
A vulnerability in the phone book feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could
6.5MEDIUM
 CVE-2019-1720
< x12.5.1
A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an a
6.8MEDIUM
 CVE-2019-1679
< x12.5
A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Commun
5.0MEDIUM
 CVE-2018-15430
all versions
A vulnerability in the administrative web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (
7.2HIGH
 CVE-2018-0409
all versions
A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Ci
7.5HIGH
 CVE-2018-0358
all versions
A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an u
7.5HIGH
 CVE-2017-12287
all versions
A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Vide
4.3MEDIUM
 CVE-2017-6790
all versions
A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an
6.8MEDIUM
 CVE-2017-3790
all versions
A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) s
8.6HIGH
 CVE-2016-1468
all versions
The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated us
8.8HIGH
 CVE-2016-1444
all versions
The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressw
6.5MEDIUM
 CVE-2016-1400
all versions
Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (serv
7.5HIGH
 CVE-2015-0752
all versions
Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to
 CVE-2015-0579
all versions
Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memo
 CVE-2014-0675
all versions
The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across dif
 CVE-2012-0331
all versions
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (de
 CVE-2012-0330
all versions
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (de
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin