cveboard RSS feed

CVE-2022-20853

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2022
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Cisco Expressway Series and Cisco TelePresence VCS Cross-Site Request Forgery Vulnerability

A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco TelePresence Video Communication Server (VCS) Expressway

Vendor
Cisco
Product
Cisco TelePresence Video Communication Server (VCS) Expressway
Platforms
Unknown
Default status
unknown
Cisco TelePresence Video Communication Server (VCS) Expressway · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
X8.11.2affectedUnavailableUnavailableUnavailableNone listed
X8.6affectedUnavailableUnavailableUnavailableNone listed
X8.11.3affectedUnavailableUnavailableUnavailableNone listed
X8.2.2affectedUnavailableUnavailableUnavailableNone listed
X8.8.3affectedUnavailableUnavailableUnavailableNone listed
X8.11.0affectedUnavailableUnavailableUnavailableNone listed
X12.5.2affectedUnavailableUnavailableUnavailableNone listed
X8.1.1affectedUnavailableUnavailableUnavailableNone listed
X8.9affectedUnavailableUnavailableUnavailableNone listed
X12.5.1affectedUnavailableUnavailableUnavailableNone listed
X12.5.6affectedUnavailableUnavailableUnavailableNone listed
X8.7.3affectedUnavailableUnavailableUnavailableNone listed
X12.6.0affectedUnavailableUnavailableUnavailableNone listed
X8.11.1affectedUnavailableUnavailableUnavailableNone listed
X8.5affectedUnavailableUnavailableUnavailableNone listed
X8.9.1affectedUnavailableUnavailableUnavailableNone listed
X8.10.2affectedUnavailableUnavailableUnavailableNone listed
X8.8.2affectedUnavailableUnavailableUnavailableNone listed
X8.5.3affectedUnavailableUnavailableUnavailableNone listed
X8.1affectedUnavailableUnavailableUnavailableNone listed
X8.9.2affectedUnavailableUnavailableUnavailableNone listed
X8.11.4affectedUnavailableUnavailableUnavailableNone listed
X12.5.4affectedUnavailableUnavailableUnavailableNone listed
X8.8.1affectedUnavailableUnavailableUnavailableNone listed
X8.2.1affectedUnavailableUnavailableUnavailableNone listed
X8.5.1affectedUnavailableUnavailableUnavailableNone listed
X8.6.1affectedUnavailableUnavailableUnavailableNone listed
X8.1.2affectedUnavailableUnavailableUnavailableNone listed
X8.8affectedUnavailableUnavailableUnavailableNone listed
X8.10.0affectedUnavailableUnavailableUnavailableNone listed
X12.5.3affectedUnavailableUnavailableUnavailableNone listed
X8.10.1affectedUnavailableUnavailableUnavailableNone listed
X12.5.7affectedUnavailableUnavailableUnavailableNone listed
X8.10.3affectedUnavailableUnavailableUnavailableNone listed
X8.7.1affectedUnavailableUnavailableUnavailableNone listed
X8.2affectedUnavailableUnavailableUnavailableNone listed
X12.5.8affectedUnavailableUnavailableUnavailableNone listed
X8.7affectedUnavailableUnavailableUnavailableNone listed
X8.5.2affectedUnavailableUnavailableUnavailableNone listed
X12.5.9affectedUnavailableUnavailableUnavailableNone listed
X12.5.0affectedUnavailableUnavailableUnavailableNone listed
X8.10.4affectedUnavailableUnavailableUnavailableNone listed
X8.7.2affectedUnavailableUnavailableUnavailableNone listed
X12.5.5affectedUnavailableUnavailableUnavailableNone listed
X12.6.1affectedUnavailableUnavailableUnavailableNone listed
X12.6.2affectedUnavailableUnavailableUnavailableNone listed
X12.6.3affectedUnavailableUnavailableUnavailableNone listed
X12.6.4affectedUnavailableUnavailableUnavailableNone listed
X12.7.0affectedUnavailableUnavailableUnavailableNone listed
X12.7.1affectedUnavailableUnavailableUnavailableNone listed
X14.0.0affectedUnavailableUnavailableUnavailableNone listed
X14.0.1affectedUnavailableUnavailableUnavailableNone listed
X14.0.2affectedUnavailableUnavailableUnavailableNone listed
X14.0.3affectedUnavailableUnavailableUnavailableNone listed
X14.0.4affectedUnavailableUnavailableUnavailableNone listed
X14.0.5affectedUnavailableUnavailableUnavailableNone listed
X14.0.6affectedUnavailableUnavailableUnavailableNone listed
X14.0.7affectedUnavailableUnavailableUnavailableNone listed
X14.0.8affectedUnavailableUnavailableUnavailableNone listed