{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T12:05:47Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","canonical_url":"https://vulnslist.com/products/cisco-telepresence-video-communication-server-vcs-expressway","product":{"name":"Cisco TelePresence Video Communication Server (VCS) Expressway","slug":"cisco-telepresence-video-communication-server-vcs-expressway","vendor":"Cisco","aliases":[],"exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"source_refresh":{"cisco_advisories_at":"2026-07-21T03:00:03Z","cisco_csaf_at":"2026-07-21T05:14:24Z","nvd_at":"2026-07-21T05:16:30Z","cisa_kev_at":"2026-07-21T05:16:31Z","first_epss_at":"2026-07-21T05:16:34Z"},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","summary_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"visible_cve_count":42,"scope_counts":{"structured_affected":42},"kev_count":1,"highest_epss":0.99999,"newest_advisory_updated_at":"2025-02-05T16:00:00Z","last_advisory_updated_at":"2025-02-05T16:00:00Z","data_refreshed_at":"2026-07-21T05:16:34Z"},"public_evidence":[{"cve":{"id":"CVE-2023-44487"},"advisory":{"id":"cisco-sa-http2-reset-d8Kf32vZ","slug":"cisco-sa-http2-reset-d8kf32vz","title":"HTTP/2 Rapid Reset Attack Affecting Cisco Products: October 2023","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:59:12Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99999,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2023-10-16T16:00:00Z","updated_at":"2023-12-21T17:09:38Z","advisory_updated_at":"2023-12-21T17:09:38Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ"},"row_display_order":1},{"cve":{"id":"CVE-2020-25687"},"advisory":{"id":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","slug":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","title":"Multiple Vulnerabilities in dnsmasq DNS Forwarder Affecting Cisco Products: January 2021","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:06:28Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.86692,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2021-01-19T12:15:00Z","updated_at":"2021-08-30T17:24:42Z","advisory_updated_at":"2021-08-30T17:24:42Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"row_display_order":2},{"cve":{"id":"CVE-2020-25683"},"advisory":{"id":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","slug":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","title":"Multiple Vulnerabilities in dnsmasq DNS Forwarder Affecting Cisco Products: January 2021","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:06:28Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.86041,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2021-01-19T12:15:00Z","updated_at":"2021-08-30T17:24:42Z","advisory_updated_at":"2021-08-30T17:24:42Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"row_display_order":3},{"cve":{"id":"CVE-2020-25681"},"advisory":{"id":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","slug":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","title":"Multiple Vulnerabilities in dnsmasq DNS Forwarder Affecting Cisco Products: January 2021","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:06:28Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.81191,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2021-01-19T12:15:00Z","updated_at":"2021-08-30T17:24:42Z","advisory_updated_at":"2021-08-30T17:24:42Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"row_display_order":4},{"cve":{"id":"CVE-2020-25682"},"advisory":{"id":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","slug":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","title":"Multiple Vulnerabilities in dnsmasq DNS Forwarder Affecting Cisco Products: January 2021","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:06:28Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.70754,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2021-01-19T12:15:00Z","updated_at":"2021-08-30T17:24:42Z","advisory_updated_at":"2021-08-30T17:24:42Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"row_display_order":5},{"cve":{"id":"CVE-2021-33193"},"advisory":{"id":"cisco-sa-apache-httpd-2.4.49-VWL69sWQ","slug":"cisco-sa-apache-httpd-2-4-49-vwl69swq","title":"Multiple Vulnerabilities in Apache HTTP Server Affecting Cisco Products: November 2021","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:00:46Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.46179,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-11-24T16:00:00Z","updated_at":"2022-01-20T22:52:28Z","advisory_updated_at":"2022-01-20T22:52:28Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ"},"row_display_order":6},{"cve":{"id":"CVE-2023-20209"},"advisory":{"id":"cisco-sa-expressway-injection-X475EbTQ","slug":"cisco-sa-expressway-injection-x475ebtq","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-injection-X475EbTQ"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:54Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.37885,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"},"published_at":"2023-08-16T16:00:00Z","updated_at":"2023-08-16T16:00:00Z","advisory_updated_at":"2023-08-16T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-injection-X475EbTQ","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-injection-X475EbTQ"},"row_display_order":7},{"cve":{"id":"CVE-2020-25686"},"advisory":{"id":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","slug":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","title":"Multiple Vulnerabilities in dnsmasq DNS Forwarder Affecting Cisco Products: January 2021","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:06:28Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.04873,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2021-01-19T12:15:00Z","updated_at":"2021-08-30T17:24:42Z","advisory_updated_at":"2021-08-30T17:24:42Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"row_display_order":8},{"cve":{"id":"CVE-2019-1845"},"advisory":{"id":"cisco-sa-20190605-cucm-imp-dos","slug":"cisco-sa-20190605-cucm-imp-dos","title":"Cisco Unified Communications Manager IM&P Service, Cisco TelePresence VCS, and Cisco Expressway Series Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-cucm-imp-dos"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:00:48Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.04639,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-06-05T16:00:00Z","updated_at":"2019-06-24T13:49:49Z","advisory_updated_at":"2019-06-24T13:49:49Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-cucm-imp-dos","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-cucm-imp-dos"},"row_display_order":9},{"cve":{"id":"CVE-2020-25684"},"advisory":{"id":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","slug":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","title":"Multiple Vulnerabilities in dnsmasq DNS Forwarder Affecting Cisco Products: January 2021","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:06:28Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.04041,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2021-01-19T12:15:00Z","updated_at":"2021-08-30T17:24:42Z","advisory_updated_at":"2021-08-30T17:24:42Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"row_display_order":10},{"cve":{"id":"CVE-2018-0409"},"advisory":{"id":"cisco-sa-20180815-ucmimps-dos","slug":"cisco-sa-20180815-ucmimps-dos","title":"Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-ucmimps-dos"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:06Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03491,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-08-15T16:00:00Z","updated_at":"2018-09-04T15:53:00Z","advisory_updated_at":"2018-09-04T15:53:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-ucmimps-dos","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-ucmimps-dos"},"row_display_order":11},{"cve":{"id":"CVE-2018-0358"},"advisory":{"id":"cisco-sa-20180620-vcse-dos","slug":"cisco-sa-20180620-vcse-dos","title":"Cisco TelePresence Video Communication Server Expressway Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-vcse-dos"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:07Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03449,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:48Z"},"published_at":"2018-06-20T16:00:00Z","updated_at":"2018-06-20T16:00:00Z","advisory_updated_at":"2018-06-20T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-vcse-dos","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-vcse-dos"},"row_display_order":12},{"cve":{"id":"CVE-2022-20755"},"advisory":{"id":"cisco-sa-expressway-filewrite-87Q5YRk","slug":"cisco-sa-expressway-filewrite-87q5yrk","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-87Q5YRk"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03177,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:48Z"},"published_at":"2022-03-02T16:00:00Z","updated_at":"2022-03-02T16:00:00Z","advisory_updated_at":"2022-03-02T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-87Q5YRk","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-87Q5YRk"},"row_display_order":13},{"cve":{"id":"CVE-2022-20754"},"advisory":{"id":"cisco-sa-expressway-filewrite-87Q5YRk","slug":"cisco-sa-expressway-filewrite-87q5yrk","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-87Q5YRk"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03177,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:48Z"},"published_at":"2022-03-02T16:00:00Z","updated_at":"2022-03-02T16:00:00Z","advisory_updated_at":"2022-03-02T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-87Q5YRk","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-87Q5YRk"},"row_display_order":14},{"cve":{"id":"CVE-2015-4319"},"advisory":{"id":"Cisco-SA-20150814-CVE-2015-4319","slug":"cisco-sa-20150814-cve-2015-4319","title":"Cisco TelePresence Video Communication Server Expressway Access Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150814-CVE-2015-4319"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:10Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02407,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-08-14T20:15:26Z","updated_at":"2015-08-14T20:15:26Z","advisory_updated_at":"2015-08-14T20:15:26Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150814-CVE-2015-4319","row_display_order":15},{"cve":{"id":"CVE-2021-34716"},"advisory":{"id":"cisco-sa-ewrce-QPynNCjh","slug":"cisco-sa-ewrce-qpynncjh","title":"Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution  Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewrce-QPynNCjh"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:01Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02395,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-08-18T16:00:00Z","updated_at":"2021-08-18T16:00:00Z","advisory_updated_at":"2021-08-18T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewrce-QPynNCjh","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewrce-QPynNCjh"},"row_display_order":16},{"cve":{"id":"CVE-2020-25685"},"advisory":{"id":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","slug":"cisco-sa-dnsmasq-dns-2021-c5mrdf3g","title":"Multiple Vulnerabilities in dnsmasq DNS Forwarder Affecting Cisco Products: January 2021","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:06:28Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02181,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2021-01-19T12:15:00Z","updated_at":"2021-08-30T17:24:42Z","advisory_updated_at":"2021-08-30T17:24:42Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g"},"row_display_order":17},{"cve":{"id":"CVE-2019-1679"},"advisory":{"id":"cisco-sa-20190206-rest-api-ssrf","slug":"cisco-sa-20190206-rest-api-ssrf","title":"Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-rest-api-ssrf"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:00:54Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02125,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:48Z"},"published_at":"2019-02-06T16:00:00Z","updated_at":"2019-02-06T16:00:00Z","advisory_updated_at":"2019-02-06T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-rest-api-ssrf","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-rest-api-ssrf"},"row_display_order":18},{"cve":{"id":"CVE-2015-4315"},"advisory":{"id":"Cisco-SA-20150813-CVE-2015-4315","slug":"cisco-sa-20150813-cve-2015-4315","title":"Cisco Telepresence Video Communication Server Expressway Call Policy Configuration Page Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150813-CVE-2015-4315"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:11Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01871,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-08-13T21:13:06Z","updated_at":"2015-08-13T21:13:06Z","advisory_updated_at":"2015-08-13T21:13:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150813-CVE-2015-4315","row_display_order":19},{"cve":{"id":"CVE-2022-20812"},"advisory":{"id":"cisco-sa-expressway-overwrite-3buqW8LH","slug":"cisco-sa-expressway-overwrite-3buqw8lh","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LH"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:56Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01795,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-07-06T16:00:00Z","updated_at":"2023-04-04T20:50:42Z","advisory_updated_at":"2023-04-04T20:50:42Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LH","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LH"},"row_display_order":20},{"cve":{"id":"CVE-2015-6413"},"advisory":{"id":"cisco-sa-20151209-tvc","slug":"cisco-sa-20151209-tvc","title":"Cisco TelePresence Video Communication Server Expressway Web Framework Code Unauthorized Access Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-tvc"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:08Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01684,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-12-09T13:30:00Z","updated_at":"2015-12-09T13:30:00Z","advisory_updated_at":"2015-12-09T13:30:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-tvc","row_display_order":21},{"cve":{"id":"CVE-2019-1872"},"advisory":{"id":"cisco-sa-20190605-vcs","slug":"cisco-sa-20190605-vcs","title":"Cisco TelePresence Video Communication Server and Cisco Expressway Series Server-Side Request Forgery Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-vcs"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:25Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01516,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-06-05T16:00:00Z","updated_at":"2019-06-05T16:00:00Z","advisory_updated_at":"2019-06-05T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-vcs","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-vcs"},"row_display_order":22},{"cve":{"id":"CVE-2015-4314"},"advisory":{"id":"Cisco-SA-20150812-CVE-2015-4314","slug":"cisco-sa-20150812-cve-2015-4314","title":"Cisco TelePresence Video Communication Server Expressway Information Disclosure Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150812-CVE-2015-4314"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01327,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-08-12T19:19:53Z","updated_at":"2015-08-12T19:19:53Z","advisory_updated_at":"2015-08-12T19:19:53Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150812-CVE-2015-4314","row_display_order":23},{"cve":{"id":"CVE-2020-3596"},"advisory":{"id":"cisco-sa-expressway-vcs-dos-n6xxTMZB","slug":"cisco-sa-expressway-vcs-dos-n6xxtmzb","title":"Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-vcs-dos-n6xxTMZB"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:04Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01228,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:48Z"},"published_at":"2020-10-07T16:00:00Z","updated_at":"2020-10-07T16:00:00Z","advisory_updated_at":"2020-10-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-vcs-dos-n6xxTMZB","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-vcs-dos-n6xxTMZB"},"row_display_order":24},{"cve":{"id":"CVE-2016-1444"},"advisory":{"id":"cisco-sa-20160706-vcs","slug":"cisco-sa-20160706-vcs","title":"Cisco Video Communication Server and Expressway Trusted Certificate Authentication Bypass Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-vcs"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:27Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01202,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2016-07-06T07:00:00Z","updated_at":"2016-07-06T07:00:00Z","advisory_updated_at":"2016-07-06T07:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-vcs","row_display_order":25},{"cve":{"id":"CVE-2021-34715"},"advisory":{"id":"cisco-sa-ewver-c6WZPXRx","slug":"cisco-sa-ewver-c6wzpxrx","title":"Cisco Expressway Series and TelePresence Video Communication Server  Image Verification Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewver-c6WZPXRx"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:02Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01056,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-08-18T16:00:00Z","updated_at":"2021-08-18T16:00:00Z","advisory_updated_at":"2021-08-18T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewver-c6WZPXRx","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewver-c6WZPXRx"},"row_display_order":26},{"cve":{"id":"CVE-2022-20813"},"advisory":{"id":"cisco-sa-expressway-overwrite-3buqW8LH","slug":"cisco-sa-expressway-overwrite-3buqw8lh","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LH"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:56Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01028,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-07-06T16:00:00Z","updated_at":"2023-04-04T20:50:42Z","advisory_updated_at":"2023-04-04T20:50:42Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LH","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LH"},"row_display_order":27},{"cve":{"id":"CVE-2023-20105"},"advisory":{"id":"cisco-sa-expressway-priv-esc-Ls2B9t7b","slug":"cisco-sa-expressway-priv-esc-ls2b9t7b","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-priv-esc-Ls2B9t7b"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00914,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2023-06-07T16:00:00Z","updated_at":"2023-06-07T16:00:00Z","advisory_updated_at":"2023-06-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-priv-esc-Ls2B9t7b","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-priv-esc-Ls2B9t7b"},"row_display_order":28},{"cve":{"id":"CVE-2022-20807"},"advisory":{"id":"cisco-sa-expressway-filewrite-bsFVwueV","slug":"cisco-sa-expressway-filewrite-bsfvwuev","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00913,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-05-18T16:00:00Z","updated_at":"2023-01-17T20:24:01Z","advisory_updated_at":"2023-01-17T20:24:01Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV"},"row_display_order":29},{"cve":{"id":"CVE-2022-20809"},"advisory":{"id":"cisco-sa-expressway-filewrite-bsFVwueV","slug":"cisco-sa-expressway-filewrite-bsfvwuev","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00906,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-05-18T16:00:00Z","updated_at":"2023-01-17T20:24:01Z","advisory_updated_at":"2023-01-17T20:24:01Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV"},"row_display_order":30},{"cve":{"id":"CVE-2022-20806"},"advisory":{"id":"cisco-sa-expressway-filewrite-bsFVwueV","slug":"cisco-sa-expressway-filewrite-bsfvwuev","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00899,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-05-18T16:00:00Z","updated_at":"2023-01-17T20:24:01Z","advisory_updated_at":"2023-01-17T20:24:01Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV"},"row_display_order":31},{"cve":{"id":"CVE-2022-20814"},"advisory":{"id":"cisco-sa-expressway-csrf-sqpsSfY6","slug":"cisco-sa-expressway-csrf-sqpssfy6","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:58Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00897,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-10-05T16:00:00Z","updated_at":"2022-10-05T16:00:00Z","advisory_updated_at":"2022-10-05T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6"},"row_display_order":32},{"cve":{"id":"CVE-2024-20252"},"advisory":{"id":"cisco-sa-expressway-csrf-KnnZDMj3","slug":"cisco-sa-expressway-csrf-knnzdmj3","title":"Cisco Expressway Series Cross-Site Request Forgery Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-KnnZDMj3"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00846,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2024-02-07T16:00:00Z","updated_at":"2024-02-12T17:55:43Z","advisory_updated_at":"2024-02-12T17:55:43Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-KnnZDMj3","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-KnnZDMj3"},"row_display_order":33},{"cve":{"id":"CVE-2024-20254"},"advisory":{"id":"cisco-sa-expressway-csrf-KnnZDMj3","slug":"cisco-sa-expressway-csrf-knnzdmj3","title":"Cisco Expressway Series Cross-Site Request Forgery Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-KnnZDMj3"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00805,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2024-02-07T16:00:00Z","updated_at":"2024-02-12T17:55:43Z","advisory_updated_at":"2024-02-12T17:55:43Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-KnnZDMj3","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-KnnZDMj3"},"row_display_order":34},{"cve":{"id":"CVE-2023-20192"},"advisory":{"id":"cisco-sa-expressway-priv-esc-Ls2B9t7b","slug":"cisco-sa-expressway-priv-esc-ls2b9t7b","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-priv-esc-Ls2B9t7b"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00656,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2023-06-07T16:00:00Z","updated_at":"2023-06-07T16:00:00Z","advisory_updated_at":"2023-06-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-priv-esc-Ls2B9t7b","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-priv-esc-Ls2B9t7b"},"row_display_order":35},{"cve":{"id":"CVE-2022-20853"},"advisory":{"id":"cisco-sa-expressway-csrf-sqpsSfY6","slug":"cisco-sa-expressway-csrf-sqpssfy6","title":"Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:58Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00615,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-10-05T16:00:00Z","updated_at":"2022-10-05T16:00:00Z","advisory_updated_at":"2022-10-05T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6"},"row_display_order":36},{"cve":{"id":"CVE-2024-20255"},"advisory":{"id":"cisco-sa-expressway-csrf-KnnZDMj3","slug":"cisco-sa-expressway-csrf-knnzdmj3","title":"Cisco Expressway Series Cross-Site Request Forgery Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-KnnZDMj3"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00603,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2024-02-07T16:00:00Z","updated_at":"2024-02-12T17:55:43Z","advisory_updated_at":"2024-02-12T17:55:43Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-KnnZDMj3","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-KnnZDMj3"},"row_display_order":37},{"cve":{"id":"CVE-2024-20492"},"advisory":{"id":"cisco-sa-expw-escalation-3bkz77bD","slug":"cisco-sa-expw-escalation-3bkz77bd","title":"Cisco Expressway Series Privilege Escalation Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expw-escalation-3bkz77bD"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:48Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00551,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2024-10-02T16:00:00Z","updated_at":"2024-10-02T16:00:00Z","advisory_updated_at":"2024-10-02T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expw-escalation-3bkz77bD","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expw-escalation-3bkz77bD"},"row_display_order":38},{"cve":{"id":"CVE-2025-20179"},"advisory":{"id":"cisco-sa-expressway-xss-uexUZrEW","slug":"cisco-sa-expressway-xss-uexuzrew","title":"Cisco Expressway Series Cross-Site Scripting Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-xss-uexUZrEW"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:47Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00381,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"},"published_at":"2025-02-05T16:00:00Z","updated_at":"2025-02-05T16:00:00Z","advisory_updated_at":"2025-02-05T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-xss-uexUZrEW","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-xss-uexUZrEW"},"row_display_order":39},{"cve":{"id":"CVE-2024-20400"},"advisory":{"id":"cisco-sa-expressway-redirect-KJsFuXgj","slug":"cisco-sa-expressway-redirect-kjsfuxgj","title":"Cisco Expressway Series Open Redirect Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-redirect-KJsFuXgj"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:51Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00378,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2024-07-17T16:00:00Z","updated_at":"2024-07-17T16:00:00Z","advisory_updated_at":"2024-07-17T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-redirect-KJsFuXgj","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-redirect-KJsFuXgj"},"row_display_order":40},{"cve":{"id":"CVE-2015-6318"},"advisory":{"id":"cisco-sa-20151007-vcs","slug":"cisco-sa-20151007-vcs","title":"Cisco TelePresence Video Communication Server Expressway File Modification Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151007-vcs"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:59:09Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00355,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2015-10-07T20:51:00Z","updated_at":"2015-10-07T20:51:00Z","advisory_updated_at":"2015-10-07T20:51:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151007-vcs","row_display_order":41},{"cve":{"id":"CVE-2024-20497"},"advisory":{"id":"cisco-sa-expressway-auth-kdFrcZ2j","slug":"cisco-sa-expressway-auth-kdfrcz2j","title":"Cisco Expressway Edge Improper Authorization Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-auth-kdFrcZ2j"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:58:50Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Video Communication Server (VCS) Expressway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00322,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2024-09-04T16:00:00Z","updated_at":"2024-09-04T16:00:00Z","advisory_updated_at":"2024-09-04T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-auth-kdFrcZ2j","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-auth-kdFrcZ2j"},"row_display_order":42}]}