Cisco Cisco TelePresence Video Communication Server (VCS) Expressway

Name: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical18high11medium3low

updated 2026-10-27

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	—
CVE-2023-20209US	high7.2	39.5% (99th)	Exploit	no fix	2023-08-16	68 versions
CVE-2020-25686US	low3.7OT elevated	5.47% (93rd)	Exploit	no fix	2021-01-20	—
CVE-2020-25687US	medium5.9	89.3% (100th)	—	no fix	2021-01-20	—
CVE-2020-25683US	medium5.9	88.8% (100th)	—	no fix	2021-01-20	—
CVE-2020-25681US	high8.1	84.1% (100th)	—	no fix	2021-01-20	—
CVE-2020-25682US	high8.1	75.1% (100th)	—	no fix	2021-01-20	—
CVE-2021-33193US	high7.5	46.2% (99th)	—	no fix	2021-08-16	—
CVE-2019-1845US	high8.6	4.64% (92nd)	—	no fix	2019-06-05	—
CVE-2020-25684US	low3.7	4.16% (91st)	—	no fix	2021-01-20	—
CVE-2018-0409US	high7.5	3.45% (89th)	—	no fix	2018-08-15	—
CVE-2022-20755US	high7.2	3.30% (88th)	—	no fix	2022-04-06	2 versions
CVE-2022-20754US	high7.2	3.30% (88th)	—	no fix	2022-04-06	2 versions
CVE-2021-34716US	high7.2	2.40% (84th)	—	no fix	2021-08-18	2 versions
CVE-2018-0358US	high7.5	2.37% (84th)	—	no fix	2018-06-21	—
CVE-2020-25685US	low3.7	2.23% (83rd)	—	no fix	2021-01-20	—
CVE-2019-1679US	medium5.0	2.13% (82nd)	—	no fix	2019-02-07	—
CVE-2022-20812US	medium6.5	1.93% (80th)	—	no fix	2022-07-06	2 versions
CVE-2019-1872US	medium5.3	1.52% (74th)	—	no fix	2019-06-05	—
CVE-2020-3482US	medium6.5	1.38% (72nd)	—	no fix	2020-11-18	≤ n/a
CVE-2020-3596US	high7.5	1.23% (69th)	—	no fix	2020-10-08	2 versions
CVE-2022-20813US	medium5.9	1.11% (66th)	—	no fix	2022-07-06	2 versions
CVE-2021-34715US	high7.2	1.06% (64th)	—	no fix	2021-08-18	2 versions
CVE-2022-20807US	medium6.5	1.00% (63rd)	—	no fix	2022-05-27	2 versions
CVE-2022-20806US	high7.1	0.98% (62nd)	—	no fix	2022-05-27	2 versions
CVE-2022-20809US	medium6.5	0.97% (62nd)	—	no fix	2022-05-26	2 versions
CVE-2023-20105US	medium6.5	0.91% (60th)	—	no fix	2023-06-28	63 versions
CVE-2022-20814US	—	0.91% (60th)	—	no fix	2024-11-15	61 versions
CVE-2024-20252US	high8.8	0.85% (58th)	—	no fix	2024-02-07	70 versions
CVE-2024-20254US	high8.8	0.80% (57th)	—	no fix	2024-02-07	70 versions
CVE-2022-20853US	—	0.68% (52nd)	—	no fix	2024-11-15	60 versions
CVE-2023-20192US	high7.7	0.66% (51st)	—	no fix	2023-06-28	2 versions
CVE-2024-20255US	high7.1	0.60% (49th)	—	no fix	2024-02-07	70 versions
CVE-2024-20492US	medium6.7	0.55% (46th)	—	no fix	2024-10-02	80 versions
CVE-2025-20179US	—	0.40% (34th)	—	no fix	2025-02-05	82 versions
CVE-2024-20400US	—	0.38% (32nd)	—	no fix	2024-07-17	75 versions
CVE-2024-20497US	—	0.32% (25th)	—	no fix	2024-09-04	79 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow4 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-352Cross-Site Request Forgery (CSRF)4 CVEs
CWE-290Authentication Bypass by Spoofing3 CVEs
CWE-358Improperly Implemented Security Check for Standard3 CVEs
CWE-532Insertion of Sensitive Information into Log File3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-158Improper Neutralization of Null Byte or NUL Character2 CVEs

sources (2)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)36 CVEs
EUEU Vulnerability Database (ENISA)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan