Vulnerabilities

TI-2010-01311 CVE-2010-1356 · GHSA-jqpq-rcx2-cjrf

Unspecified vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0…

MEDIUM 49

Unspecified vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote attackers to execute arbitrary code via unknown vectors, aka Reference ID 69773.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03254 Published 2010-04-13 No fix listed

TI-2010-01310 CVE-2010-1355 · GHSA-gxp2-m638-792q

Cross-site scripting (XSS) vulnerability on the TANDBERG Video Communication Server (VCS)…

LOW 22

Cross-site scripting (XSS) vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Reference ID 66316.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00855 Published 2010-04-13 No fix listed CWE-79

TI-2009-04267 CVE-2009-4511 · GHSA-pg38-h6qr-j754

Multiple directory traversal vulnerabilities in the web administration interface on the…

LOW 27

Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5.1 allow remote authenticated users to read arbitrary files via a ..

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.05479 Published 2010-04-13 No fix listed CWE-200

TI-2009-04266 CVE-2009-4510 · GHSA-w99c-w692-7g63

The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed…

MEDIUM 41

The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key, which makes it easier for remote attackers to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted S…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.02148 Published 2010-04-13 No fix listed CWE-310

TI-2009-04265 CVE-2009-4509 · GHSA-4ff5-fg46-2w34

The administrative web console on the TANDBERG Video Communication Server (VCS) before…

MEDIUM 50

The administrative web console on the TANDBERG Video Communication Server (VCS) before X4.3 uses predictable session cookies in (1) tandberg/web/lib/secure.php and (2) tandberg/web/user/lib/secure.php, which makes it eas…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04533 Published 2010-04-13 No fix listed CWE-94