Vulnerabilities > Cisco > Expressway Series

DATE CVE VULNERABILITY TITLE RISK
2019-04-18 CVE-2019-1722 Cross-Site Request Forgery (CSRF) vulnerability in Cisco products
A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system.
network
low complexity
cisco CWE-352
6.5
2018-08-06 CVE-2018-5390 Resource Exhaustion vulnerability in multiple products
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
7.5