Cisco TelePresence Video Communication Server (VCS) Expressway vulnerabilities
18 known vulnerabilities in Cisco TelePresence Video Communication Server (VCS) Expressway from Cisco. 18 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
Cisco TelePresence Video Communication Server…: Improper Link Resolution Before File Access
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mult
- 7.8 High severity
Cisco TelePresence Video Communication Server…: Incorrect Permission Assignment for Critical Resource
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mult
- 7.8 High severity
Cisco TelePresence Video Communication Server…: Improper Control of Generation of Code
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mult
- 7.5 High severity
Cisco TelePresence Video Communication Server…: Uncaught Exception
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mult
- 7.5 High severity
Cisco TelePresence Video Communication Server…: NULL Pointer Dereference
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mult
- 7.5 High severity
Cisco TelePresence Video Communication Server…: Reachable Assertion
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mult
- 8.6 High severity
Cisco TelePresence Video Communication Server…: Out-of-bounds Write
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mult
- 9.8 Critical severity
Cisco TelePresence Video Communication Server…: Use of Hard-coded Credentials
A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due t
- 7.4 High severity
Cisco TelePresence Video Communication Server…: Cross-Site Request Forgery
A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficie
- 7.4 High severity
Cisco TelePresence Video Communication Server…: Improper Certificate Validation
A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation
- 7.1 High severity
Cisco TelePresence Video Communication Server…: Cross-Site Request Forgery
A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due
- 8.8 High severity
Cisco TelePresence Video Communication Server…: Cross-Site Request Forgery
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks that perform arbitrary actions on an affected devic
- 8.8 High severity
Cisco TelePresence Video Communication Server…: Cross-Site Request Forgery
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks that perform arbitrary actions on an affected devic
- 7.2 High severity
Cisco TelePresence Video Communication Server…: Improper Neutralization of Special Elements used in a Command
A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection
- 7.7 High severity
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication…
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administrator-level read-only credentials to elevate their privileges to Administrator with read-write creden
- 7.1 High severity
Cisco TelePresence Video Communication Server…: Insertion of Sensitive Information into Log File
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to write files or disclose sensitive information on an affe
- 7.2 High severity
Cisco TelePresence Video Communication Server…: Relative Path Traversal
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read/write privileges to the application to write file
- 7.2 High severity
Cisco TelePresence Video Communication Server…: Relative Path Traversal
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read/write privileges to the application to write file