Tandberg Video Communication Server
Approved changes feed: RSS · Atom
cpe:2.3:a:vsecurity:tandberg_video_communication_server:x3.1.0:*:*:*:*:*:*:*part: a version: x3.1.0 update: *
| Vendor | Vsecurity (e97d4c99-0696-5473-a503-e372eb53c47d) |
|---|---|
| Product | Tandberg Video Communication Server (4ce223d3-d950-5669-8e71-df85e0892b6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1356 |
vulnerable | 2026-06-08 04:54:07.341096 |
Details available
Unspecified vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote attackers to execute arbitrary code via unknown vectors, aka Reference ID 69773.
Published: 2010-04-13T17:00:00.000Z
Updated: 2024-09-17T01:47:00.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1355 |
vulnerable | 2026-06-08 04:54:07.338708 |
Details available
Cross-site scripting (XSS) vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Reference ID 66316.
Published: 2010-04-13T17:00:00.000Z
Updated: 2024-09-17T03:23:32.346Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4511 |
vulnerable | 2026-06-08 04:51:48.689241 |
Details available
Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5.1 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to (1) helppage.php or (2) user/helppage.php.
Published: 2010-04-13T17:00:00.000Z
Updated: 2024-08-07T07:08:36.845Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4510 |
vulnerable | 2026-06-08 04:51:48.686282 |
Details available
The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key, which makes it easier for remote attackers to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted SSH packets.
Published: 2010-04-13T17:00:00.000Z
Updated: 2024-09-16T17:33:35.477Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4509 |
vulnerable | 2026-06-08 04:51:48.683912 |
Details available
The administrative web console on the TANDBERG Video Communication Server (VCS) before X4.3 uses predictable session cookies in (1) tandberg/web/lib/secure.php and (2) tandberg/web/user/lib/secure.php, which makes it easier for remote attackers to bypass authentication, and execute arbitrary code by loading a custom software update, via a crafted "Cookie: tandberg_login=" HTTP header.
Published: 2010-04-13T17:00:00.000Z
Updated: 2024-08-07T07:08:36.779Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.