Expressway
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:expressway:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Expressway (8b4cc93c-2c8c-51aa-b80d-45a711a63f74) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-20255 |
vulnerable | 2026-06-08 06:27:17.824699 |
Details available
HIGH (8.2)
A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.
This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.
Published: 2024-02-07T16:15:36.068Z
Updated: 2025-05-08T18:48:03.125Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-20254 |
vulnerable | 2026-06-08 06:27:17.823893 |
Details available
CRITICAL (9.6)
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks that perform arbitrary actions on an affected device.
Note: "Cisco Expressway Series" refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.
For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.
Published: 2024-02-07T16:15:25.666Z
Updated: 2024-08-22T18:53:32.471Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-20252 |
vulnerable | 2026-06-08 06:27:17.791673 |
Details available
CRITICAL (9.6)
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks that perform arbitrary actions on an affected device.
Note: "Cisco Expressway Series" refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.
For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.
Published: 2024-02-07T16:15:06.066Z
Updated: 2024-08-01T21:52:31.791Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44487 |
vulnerable | 2026-06-08 06:12:41.277220 |
Details available
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Published: 2023-10-10T00:00:00.000Z
Updated: 2026-07-14T12:03:17.389Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-20813 |
vulnerable | 2026-06-08 05:39:54.933412 |
Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
CRITICAL (9)
Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning attacks on an affected device. Note: Cisco Expressway Series refers to the Expressway Control (Expressway-C) device and the Expressway Edge (Expressway-E) device. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2022-07-06T20:30:45.861Z
Updated: 2024-11-06T16:11:39.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-20812 |
vulnerable | 2026-06-08 05:39:54.930860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34716 |
vulnerable | 2026-06-08 05:32:16.193304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34715 |
vulnerable | 2026-06-08 05:32:16.191450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3596 |
vulnerable | 2026-06-08 05:25:56.079694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3482 |
vulnerable | 2026-06-08 05:25:55.507654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12287 |
vulnerable | 2026-06-08 05:08:46.448814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.