Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
33 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76497 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities | MEDIUM 6.6 | 0.2 % | ||
| CVE-2026-76496 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities | HIGH 7.0 | 0.2 % | ||
| CVE-2026-76495 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities | HIGH 7.8 | 0.1 % | ||
| CVE-2026-76494 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities | HIGH 7.8 | 0.2 % | ||
| CVE-2026-76493 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities | HIGH 7.5 | 0.4 % | ||
| CVE-2026-76490 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities | HIGH 8.6 | 0.4 % | ||
| CVE-2026-76492 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities | HIGH 7.5 | 0.4 % | ||
| CVE-2026-76491 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities | HIGH 7.5 | 0.4 % | ||
| CVE-2026-76466 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Remote Code Execution Vulnerability | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-76435 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Information Disclosure Vulnerability | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-20179 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.4 % | ||
| CVE-2022-20814 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability | HIGH 7.4 | 0.9 % | ||
| CVE-2022-20853 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series and Cisco TelePresence VCS Cross-Site Request Forgery Vulnerability | HIGH 7.4 | 0.7 % | ||
| CVE-2024-20492 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Series Privilege Escalation Vulnerability | MEDIUM 6.7 | 0.6 % | ||
| CVE-2024-20497 | X8.11.2 ; X8.6 ; X8.11.3 ; … | Cisco Expressway Edge Improper Authorization Vulnerability | MEDIUM 4.3 | 0.3 % | ||
| CVE-2024-20400 | X8.5.1 ; X8.5.3 ; X8.5 ; … | A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect | MEDIUM 4.7 | 0.4 % | ||
| CVE-2024-20255 | X8.5.1 ; X8.5.3 ; X8.5 ; … | A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, | HIGH 8.2 | 0.6 % | ||
| CVE-2024-20254 | X8.5.1 ; X8.5.3 ; X8.5 ; … | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, | CRITICAL 9.6 | 0.8 % | ||
| CVE-2024-20252 | X8.5.1 ; X8.5.3 ; X8.5 ; … | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, | CRITICAL 9.6 | 0.8 % | ||
| CVE-2023-20209 | X8.5.1 ; X8.5.3 ; X8.5 ; … | A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) cou | HIGH 7.2 | 40 % | ||
| CVE-2023-20192 | n/a | Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities | CRITICAL 9.6 | 0.7 % | ||
| CVE-2023-20105 | X8.5.1 ; X8.5.3 ; X8.5 ; … | A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) coul | CRITICAL 9.6 | 0.9 % | ||
| CVE-2022-20813 | n/a | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | CRITICAL 9.0 | 1.1 % | ||
| CVE-2022-20812 | n/a | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | CRITICAL 9.0 | 1.9 % | ||
| CVE-2022-20807 | n/a | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | MEDIUM 6.5 | 1.0 % | ||
| CVE-2022-20806 | n/a | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | HIGH 7.1 | 1.0 % | ||
| CVE-2022-20809 | n/a | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | MEDIUM 6.5 | 1.0 % | ||
| CVE-2022-20755 | n/a | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | CRITICAL 9.0 | 3.3 % | ||
| CVE-2022-20754 | n/a | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | CRITICAL 9.0 | 3.3 % | ||
| CVE-2021-34716 | n/a | Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability | HIGH 7.2 | 2.4 % | ||
| CVE-2021-34715 | n/a | Cisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability | HIGH 7.2 | 1.1 % | ||
| CVE-2020-3482 | n/a | Cisco Expressway Software Unauthorized Access Information Disclosure Vulnerability | MEDIUM 6.5 | 1.4 % | ||
| CVE-2020-3596 | n/a | Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability | HIGH 7.5 | 1.2 % |