CVE Tools

Video Management System

10 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Video Management System, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Video Management System CVEs per month

Oct 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Video Management System CVEs per month
MonthCVEs
2024-100
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090

Severity

How the 10 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical110%
  • High770%
  • Medium220%

Latest CVEs

The 10 most recently published vulnerabilities affecting Video Management System.

  1. CVE-2023-34656An issue was discovered with the JSESSION IDs in Xiamen Si Xin Communication Technology Video management system 3.1 thru 4.1 allows attackers to gain escalated privileges.8.8
  2. CVE-2023-28175Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.7.1
  3. CVE-2021-42261Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directorie...7.5
  4. CVE-2020-6785Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer7.8
  5. CVE-2019-11684Improper Access Control in Bosch Video Recording Manager9.9
  6. CVE-2020-6768Path Traversal in Bosch Video Management System (BVMS)8.6
  7. CVE-2020-6767Path Traversal in Bosch Video Management System (BVMS)7.7
  8. CVE-2019-8952A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote authorized user to access arbitrary files...6.5
  9. CVE-2019-8951An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrar...6.1
  10. CVE-2017-15290Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this da...7.5

Product grouping is registry-driven, with AI assist and human review. How it works

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store