Unrated severityNVD Advisory· Published Aug 20, 2015· Updated Jun 17, 2026

CVE-2015-4319

Description

The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs authorization, which allows remote authenticated users to reset arbitrary active-user passwords via unspecified vectors, aka Bug ID CSCuv12338.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Telepresence Video Communication Server Software
cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.5.1:*:*:*:expressway:*:*:*
Cisco Systems, Inc./Telepresence Video Communication Serverllm-fuzzy
Range: = X8.5.1

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/viewAlert.xnvdVendor Advisory
www.securityfocus.com/bid/76366nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1033323nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000