Expressway-C

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2022-20853	Cisco Systems, Inc. Expressway Series	Hig	0.48	7.4	0.01		Nov 15, 2024	A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF…
CVE-2022-20814	Cisco Systems, Inc. Expressway-C	Hig	0.48	7.4	0.01		Nov 15, 2024	A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server…

CVE-2022-20853HigNov 15, 2024
Cisco Systems, Inc.
Expressway Series
risk 0.48cvss 7.4epss 0.01
A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF…
CVE-2022-20814HigNov 15, 2024
Cisco Systems, Inc.
Expressway-C
risk 0.48cvss 7.4epss 0.01
A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server…