Expressway
14 CVEs tracked. 1 of them are in CISA KEV.
This hub aggregates every CVE we track for Expressway, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
Expressway CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 14 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical4
- High4
- Medium6
Latest CVEs
The 14 most recently published vulnerabilities affecting Expressway.
- CVE-2024-20255A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery ...8.2
- CVE-2024-20254Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CS...9.6
- CVE-2024-20252Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CS...9.6
- CVE-2023-44487The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.7.5
- CVE-2022-20813Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities9.0
- CVE-2022-20812Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities9.0
- CVE-2021-34716Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability6.7
- CVE-2021-34715Cisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability4.7
- CVE-2020-3482Cisco Expressway Software Unauthorized Access Information Disclosure Vulnerability6.5
- CVE-2020-3596Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability5.9
- CVE-2018-5390Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service7.5
- CVE-2017-12287A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated,...4.3
- CVE-2017-3790A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote attacker to cause a ...8.6
- CVE-2016-9207A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts. This does not allow for full...6.5
Product grouping is registry-driven, with AI assist and human review. How it works