Cisco Telepresence Video Communication Servers Software vulnerabilities

3 CVEs affecting Cisco Telepresence Video Communication Servers Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0662, published 2014-01-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0662, published 2014-01-22. High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days. The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID…
CVE-2011-3294, published 2011-10-19. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to…
CVE-2012-5444, published 2013-01-17. Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days. Cisco TelePresence Video Communication Server (VCS) X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request,…