Vulnerabilities > Cisco > Telepresence Conductor

DATE CVE VULNERABILITY TITLE RISK
2019-02-07 CVE-2019-1679 Server-Side Request Forgery (SSRF) vulnerability in Cisco Telepresence Video Communication Server
A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated, remote attacker to trigger an HTTP request from an affected server to an arbitrary host.
network
low complexity
cisco CWE-918
5.0
2017-10-19 CVE-2017-12287 Improper Input Validation vulnerability in Cisco products
A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated, remote attacker to cause the CDB process on an affected system to restart unexpectedly, resulting in a temporary denial of service (DoS) condition.
network
low complexity
cisco CWE-20
4.3