Known vulnerabilities in Expressway Series

Vendor: Cisco Systems, Inc
Software: Expressway Series
Software CPE: cpe:2.3:a:cisco_systems:expressway_series:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Expressway Series Expressway Series is affected by 13 known vulnerabilities: 4 medium, 9 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103663 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20179		 CWE-79 Low
No
No
 15.2.2 06.02.2025 SB2025020613
#VU98033 - Command injection
CVE-2024-20492		 CWE-77 Low
No
No
 - 04.10.2024 SB2024100416
#VU94509 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-20400		 CWE-601 Medium
No
No
 15.0.2 18.07.2024 SB2024071801
#VU86257 - Cross-Site Request Forgery (CSRF)
CVE-2024-20255		 CWE-352 Low
No
No
 14.3.4, 15.0 08.02.2024 SB2024020839
#VU86254 - Cross-Site Request Forgery (CSRF)
CVE-2024-20254		 CWE-352 Low
No
No
 14.3.4, 15.0 08.02.2024 SB2024020839
#VU86253 - Cross-Site Request Forgery (CSRF)
CVE-2024-20252		 CWE-352 Low
No
No
 14.3.4, 15.0 08.02.2024 SB2024020839
#VU79953 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20209		 CWE-78 Low
Available
No
 14.3.1 24.08.2023 SB2023082436
#VU77084 - Permissions, Privileges, and Access Controls
CVE-2023-20192		 CWE-264 Low
No
No
 14.3.0 08.06.2023 SB2023060807
#VU77083 - Unverified Password Change
CVE-2023-20105		 CWE-620 Medium
No
No
 14.2.1 08.06.2023 SB2023060806
#VU67968 - Cross-Site Request Forgery (CSRF)
CVE-2022-20853		 CWE-352 Low
No
No
 14.0.9 06.10.2022 SB2022100632
#VU67967 - Improper Certificate Validation
CVE-2022-20814		 CWE-295 Medium
No
No
 14.2 06.10.2022 SB2022100631
#VU64963 - Improper Neutralization of Null Byte or NUL Character
CVE-2022-20813		 CWE-158 Medium
No
No
 14.0.7 07.07.2022 SB2022070706
#VU64962 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20812		 CWE-22 Low
No
No
 14.0.7 07.07.2022 SB2022070706