Known vulnerabilities in Cisco TelePresence Video Communication Server

Vendor: Cisco Systems, Inc
Software: Cisco TelePresence Video Communication Server
Software CPE: cpe:2.3:a:cisco_systems:cisco_telepresence_video_communication_server:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco TelePresence Video Communication Server Cisco TelePresence Video Communication Server is affected by 23 known vulnerabilities: 1 high, 9 medium, 13 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86257 - Cross-Site Request Forgery (CSRF)
CVE-2024-20255		 CWE-352 Low
No
No
 - 08.02.2024 SB2024020839
#VU86254 - Cross-Site Request Forgery (CSRF)
CVE-2024-20254		 CWE-352 Low
No
No
 - 08.02.2024 SB2024020839
#VU86253 - Cross-Site Request Forgery (CSRF)
CVE-2024-20252		 CWE-352 Low
No
No
 - 08.02.2024 SB2024020839
#VU64963 - Improper Neutralization of Null Byte or NUL Character
CVE-2022-20813		 CWE-158 Medium
No
No
 14.0.7 07.07.2022 SB2022070706
#VU64962 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20812		 CWE-22 Low
No
No
 14.0.7 07.07.2022 SB2022070706
#VU63424 - Information Exposure Through Log Files
CVE-2022-20809		 CWE-532 Low
No
No
 14.0.7 19.05.2022 SB2022051906
#VU63421 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-20807		 CWE-611 Low
No
No
 14.0.7 19.05.2022 SB2022051906
#VU63420 - External Control of File Name or Path
CVE-2022-20806		 CWE-73 Low
No
No
 14.0.7 19.05.2022 SB2022051906
#VU56029 - Improper Cleanup on Thrown Exception
CVE-2021-34716		 CWE-460 Low
No
No
 X14.0.3 23.08.2021 SB2021082303
#VU56028 - Improper Verification of Cryptographic Signature
CVE-2021-34715		 CWE-347 Low
No
No
 X14.0.3 23.08.2021 SB2021082303
#VU48563 - Improper Access Control
CVE-2020-3482		 CWE-284 Medium
No
No
 X12.6.3 18.11.2020 SB2020111909
#VU47528 - Uncontrolled Memory Allocation
CVE-2020-3596		 CWE-789 Medium
No
No
 - 08.10.2020 SB2020101308
#VU17433 - Cross-Site Request Forgery (CSRF)
CVE-2019-1679		 CWE-352 Low
No
No
 X12.5 07.02.2019 SB2019020714
#VU14431 - Improper input validation
CVE-2018-0409		 CWE-126 Low
No
No
 X8.11 15.08.2018 SB2018081611
SB2018081612
#VU14200 - Resource exhaustion
CVE-2018-5390		 CWE-400 Medium
No
No
 - 07.08.2018 SB2018080703
SB2018080704
SB2018080706
and 22 more
#VU14203 - Resource exhaustion
CVE-2018-6922		 CWE-400 Medium
No
No
 - 07.08.2018 SB2018080709
SB2018082812
SB2018110902
#VU13405 - Resource exhaustion
CVE-2018-0358		 CWE-400 Low
No
No
 - 20.06.2018 SB2018062105
#VU8897 - Improper input validation
CVE-2017-12287		 CWE-20 Low
No
No
 - 19.10.2017 SB2017101913
#VU7982 - Improper input validation
CVE-2017-6790		 CWE-20 Medium
No
No
 - 17.08.2017 SB2017081711
#VU12994 - Memory corruption
CVE-2017-3790		 CWE-119 Medium
No
No
 - 25.01.2017 SB2017012506


Showing elements 1 - 20 out of 23