What’s Vulnerable › Products

Cisco Expressway vulnerabilities

14 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Cisco Expressway version is affected

Exploited Cisco Expressway vulnerabilities

• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest Cisco Expressway vulnerabilities

• CVE-2024-20255 — (CVSS 7.1)
• CVE-2024-20254 — (CVSS 8.8)
• CVE-2024-20252 — (CVSS 8.8)
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
• CVE-2022-20813 — Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (CVSS 5.9)
• CVE-2022-20812 — Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (CVSS 6.5)
• CVE-2021-34716 — Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability (CVSS 7.2)
• CVE-2021-34715 — Cisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability (CVSS 7.2)
• CVE-2020-3482 — Cisco Expressway Software Unauthorized Access Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2020-3596 — Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability (CVSS 7.5)
• CVE-2018-5390 — Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (CVSS 7.5)
• CVE-2017-12287 — (CVSS 4.3)
• CVE-2017-3790 — (CVSS 8.6)
• CVE-2016-9207 — (CVSS 6.5)