Vulnerabilities (CVE)

Filtered by vendor Cisco Subscribe
Filtered by product Telepresence Video Communication Server
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-0675 1 Cisco 1 Telepresence Video Communication Server 2017-08-29 6.4 MEDIUM N/A
The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471.
CVE-2015-0579 1 Cisco 1 Telepresence Video Communication Server 2017-01-06 5.0 MEDIUM N/A
Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memory and CPU consumption, and partial outage) via crafted SIP packets, aka Bug ID CSCur12473.
CVE-2015-0752 1 Cisco 1 Telepresence Video Communication Server 2017-01-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635.
CVE-2012-5444 1 Cisco 2 Telepresence Video Communication Server, Telepresence Video Communication Servers Software 2013-01-29 5.0 MEDIUM N/A
Cisco TelePresence Video Communication Server (VCS) X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989.
CVE-2012-0330 1 Cisco 2 Telepresence System Software, Telepresence Video Communication Server 2012-03-01 7.8 HIGH N/A
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a malformed SIP message, aka Bug ID CSCtr20426.
CVE-2012-0331 1 Cisco 2 Telepresence System Software, Telepresence Video Communication Server 2012-03-01 7.5 HIGH N/A
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP packet, as demonstrated by a SIP INVITE message from a Tandberg device, aka Bug ID CSCtq73319.