Telepresence Video Communication Servers Software

DATE	CVE	VULNERABILITY TITLE	RISK
2014-01-22	CVE-2014-0662	Improper Input Validation vulnerability in Cisco products The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632. network cisco CWE-20	7.1
2013-01-17	CVE-2012-5444	Permissions, Privileges, and Access Controls vulnerability in Cisco Telepresence Video Communication Servers Software X7.0.3 Cisco TelePresence Video Communication Server (VCS) X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989. network low complexity cisco CWE-264	5.0
2011-10-19	CVE-2011-3294	Cross-Site Scripting vulnerability in Cisco products Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342. network cisco CWE-79	4.3