Telepresence Video Communication Server vulnerabilities

7 known vulnerabilities in Telepresence Video Communication Server from Cisco. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Cisco TelePresence Video Communication Server…: Cross-Site Request Forgery

  CVE-2022-20853Nov 15, 2024Cisco

  A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficie

• 7.4 High severity

  Cisco TelePresence Video Communication Server…: Improper Certificate Validation

  CVE-2022-20814Nov 15, 2024Cisco

  A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data.  The vulnerability is due to a lack of validation

• 7.2 High severity

  Cisco TelePresence Video Communication Server…: Improper Neutralization of Special Elements used in a Command

  CVE-2023-20209Aug 16, 2023CiscoEPSS 39.5%

  A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection

• 7.7 High severity

  Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication…

  CVE-2023-20192Jun 28, 2023Cisco

  Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administrator-level read-only credentials to elevate their privileges to Administrator with read-write creden

• 7.1 High severity

  Cisco TelePresence Video Communication Server…: Insertion of Sensitive Information into Log File

  CVE-2022-20806May 27, 2022Cisco

  Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to write files or disclose sensitive information on an affe

• 7.2 High severity

  Cisco TelePresence Video Communication Server…: Relative Path Traversal

  CVE-2022-20755Apr 6, 2022CiscoEPSS 3.3%

  Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read/write privileges to the application to write file

• 7.2 High severity

  Cisco TelePresence Video Communication Server…: Relative Path Traversal

  CVE-2022-20754Apr 6, 2022CiscoEPSS 3.3%

  Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read/write privileges to the application to write file