Expressway

This hub aggregates every CVE we track for Expressway, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 14 most recently published vulnerabilities affecting Expressway.

• CVE-2024-20255A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery ...8.2Feb 7, 2024
• CVE-2024-20254Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CS...9.6Feb 7, 2024
• CVE-2024-20252Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CS...9.6Feb 7, 2024
• CVE-2023-44487The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.KEV7.5Oct 10, 2023
• CVE-2022-20813Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities9.0Jul 6, 2022
• CVE-2022-20812Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities9.0Jul 6, 2022
• CVE-2021-34716Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability6.7Aug 18, 2021
• CVE-2021-34715Cisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability4.7Aug 18, 2021
• CVE-2020-3482Cisco Expressway Software Unauthorized Access Information Disclosure Vulnerability6.5Nov 18, 2020
• CVE-2020-3596Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability5.9Oct 8, 2020
• CVE-2018-5390Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service7.5Aug 6, 2018
• CVE-2017-12287A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated,...4.3Oct 19, 2017
• CVE-2017-3790A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote attacker to cause a ...8.6Feb 1, 2017
• CVE-2016-9207A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts. This does not allow for full...6.5Dec 14, 2016