https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 00:14:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-00301 bdu:2023-00301 https://cve.radiocsirt.org/vuln/bdu:2023-00301 https://cve.radiocsirt.org/vuln/cisco-sa-roomos-dkjgfgrk <p>Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, local attacker to conduct server-side request forgery (SSRF) attacks through an affected device or to overwrite arbitrary files on an affected device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, local attacker to conduct server-side request forgery (SSRF) attacks through an affected device or to overwrite arbitrary files on an affected device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-roomos-dkjgfgrk https://cve.radiocsirt.org/vuln/euvd-2026-7888 EUVD-2026-7888 https://cve.radiocsirt.org/vuln/euvd-2026-7888 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20002 <p>A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected system.</p> <p>A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-20002 https://cve.radiocsirt.org/vuln/ghsa-2m96-fxj3-h8fg <p>A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected system.</p> <p>A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected system.</p> https://cve.radiocsirt.org/vuln/ghsa-2m96-fxj3-h8fg https://cve.radiocsirt.org/vuln/gsd-2023-20002 gsd-2023-20002 https://cve.radiocsirt.org/vuln/gsd-2023-20002 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0075 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco TelePresence ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Dateien zu manipulieren.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco TelePresence ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0075