Cisco Cisco TelePresence Endpoint Software (TC/CE)
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical6high17medium4low
updated 2026-10-28
01
vulnerabilities (36)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2020-26147US | medium5.4 | — |
| CVE-2020-26139US | medium5.3 | — |
| CVE-2020-24586US | low3.5 | — |
| CVE-2020-26146US | medium5.3 | — |
| CVE-2020-26144US | medium6.5 | — |
| CVE-2020-26143US | medium6.5 | — |
| CVE-2020-24588US | low3.5OT elevated | — |
| CVE-2020-26145US | medium6.5 | — |
| CVE-2020-26141US | medium6.5OT elevated | — |
| CVE-2020-26140US | medium6.5OT elevated | — |
| CVE-2020-24587US | low2.6OT elevated | — |
| CVE-2020-26142US | medium5.3 | — |
| CVE-2021-1532US | medium6.5 | — |
| CVE-2022-20783US | high7.5 | — |
| CVE-2022-20764US | high8.1 | — |
| CVE-2022-20768US | medium4.9 | — |
| CVE-2020-26086US | medium4.3 | — |
| CVE-2022-20811US | high7.2 | — |
| CVE-2022-20794US | medium4.7 | — |
| CVE-2020-26068US | medium6.5 | — |
| CVE-2022-20776US | medium6.7 | — |
| CVE-2022-20955US | high7.1 | — |
| CVE-2022-20954US | high7.1 | — |
| CVE-2022-20953US | medium5.5 | — |
| CVE-2022-20793US | — | — |
| CVE-2026-20119US | — | — |
| CVE-2022-20931US | — | — |
| CVE-2023-20094US | — | — |
| CVE-2023-20090US | — | — |
| CVE-2023-20008US | high7.1 | — |
| CVE-2023-20093US | — | — |
| CVE-2023-20092US | — | — |
| CVE-2023-20091US | — | — |
| CVE-2023-20004US | — | — |
| CVE-2021-34758US | low3.3 | — |
| CVE-2023-20002US | medium4.4 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-20Improper Input Validation7 CVEs
- CWE-284Improper Access Control7 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
- CWE-59Improper Link Resolution Before File Access ('Link Following')4 CVEs
- CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')4 CVEs
- CWE-327Use of a Broken or Risky Cryptographic Algorithm3 CVEs
- CWE-61UNIX Symbolic Link (Symlink) Following3 CVEs
03
sources (3)
Which sources assert this record, and when.
- USCisco PSIRT (CSAF)35 CVEs
- EUEU Vulnerability Database (ENISA)14 CVEs
- NLNCSC-NL (CSAF)1 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan