Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-20400

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page. Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.

Published

2024-07-17T17:15:13.300

Last Modified

2025-07-31T16:40:38.417

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.7 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-601
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco telepresence_video_communication_server x8.1 Yes
Application cisco telepresence_video_communication_server x8.1.1 Yes
Application cisco telepresence_video_communication_server x8.1.2 Yes
Application cisco telepresence_video_communication_server x8.2 Yes
Application cisco telepresence_video_communication_server x8.2.1 Yes
Application cisco telepresence_video_communication_server x8.2.2 Yes
Application cisco telepresence_video_communication_server x8.5 Yes
Application cisco telepresence_video_communication_server x8.5.1 Yes
Application cisco telepresence_video_communication_server x8.5.3 Yes
Application cisco telepresence_video_communication_server x8.6 Yes
Application cisco telepresence_video_communication_server x8.6.1 Yes
Application cisco telepresence_video_communication_server x8.7 Yes
Application cisco telepresence_video_communication_server x8.7.1 Yes
Application cisco telepresence_video_communication_server x8.7.2 Yes
Application cisco telepresence_video_communication_server x8.7.3 Yes
Application cisco telepresence_video_communication_server x8.8 Yes
Application cisco telepresence_video_communication_server x8.8.1 Yes
Application cisco telepresence_video_communication_server x8.8.2 Yes
Application cisco telepresence_video_communication_server x8.8.3 Yes
Application cisco telepresence_video_communication_server x8.9 Yes
Application cisco telepresence_video_communication_server x8.9.1 Yes
Application cisco telepresence_video_communication_server x8.9.2 Yes
Application cisco telepresence_video_communication_server x8.10.0 Yes
Application cisco telepresence_video_communication_server x8.10.1 Yes
Application cisco telepresence_video_communication_server x8.10.2 Yes
Application cisco telepresence_video_communication_server x8.10.3 Yes
Application cisco telepresence_video_communication_server x8.10.4 Yes
Application cisco telepresence_video_communication_server x8.11.0 Yes
Application cisco telepresence_video_communication_server x8.11.1 Yes
Application cisco telepresence_video_communication_server x8.11.2 Yes
Application cisco telepresence_video_communication_server x8.11.3 Yes
Application cisco telepresence_video_communication_server x8.11.4 Yes
Application cisco telepresence_video_communication_server x12.5.0 Yes
Application cisco telepresence_video_communication_server x12.5.1 Yes
Application cisco telepresence_video_communication_server x12.5.2 Yes
Application cisco telepresence_video_communication_server x12.5.3 Yes
Application cisco telepresence_video_communication_server x12.5.4 Yes
Application cisco telepresence_video_communication_server x12.5.5 Yes
Application cisco telepresence_video_communication_server x12.5.6 Yes
Application cisco telepresence_video_communication_server x12.5.7 Yes
Application cisco telepresence_video_communication_server x12.5.8 Yes
Application cisco telepresence_video_communication_server x12.5.9 Yes
Application cisco telepresence_video_communication_server x12.6.0 Yes
Application cisco telepresence_video_communication_server x12.6.1 Yes
Application cisco telepresence_video_communication_server x12.6.2 Yes
Application cisco telepresence_video_communication_server x12.6.3 Yes
Application cisco telepresence_video_communication_server x12.6.4 Yes
Application cisco telepresence_video_communication_server x12.7.0 Yes
Application cisco telepresence_video_communication_server x12.7.1 Yes
Application cisco telepresence_video_communication_server x14.0.1 Yes
Application cisco telepresence_video_communication_server x14.0.2 Yes
Application cisco telepresence_video_communication_server x14.0.3 Yes
Application cisco telepresence_video_communication_server x14.0.4 Yes
Application cisco telepresence_video_communication_server x14.0.5 Yes
Application cisco telepresence_video_communication_server x14.0.6 Yes
Application cisco telepresence_video_communication_server x14.0.7 Yes
Application cisco telepresence_video_communication_server x14.0.8 Yes
Application cisco telepresence_video_communication_server x14.0.9 Yes
Application cisco telepresence_video_communication_server x14.0.10 Yes
Application cisco telepresence_video_communication_server x14.0.11 Yes
Application cisco telepresence_video_communication_server x14.2.0 Yes
Application cisco telepresence_video_communication_server x14.2.1 Yes
Application cisco telepresence_video_communication_server x14.2.2 Yes
Application cisco telepresence_video_communication_server x14.2.5 Yes
Application cisco telepresence_video_communication_server x14.2.6 Yes
Application cisco telepresence_video_communication_server x14.2.7 Yes
Application cisco telepresence_video_communication_server x14.3.0 Yes
Application cisco telepresence_video_communication_server x14.3.1 Yes
Application cisco telepresence_video_communication_server x14.3.2 Yes
Application cisco telepresence_video_communication_server x14.3.3 Yes
Application cisco telepresence_video_communication_server x14.3.4 Yes
Application cisco telepresence_video_communication_server x14.3.5 Yes
Application cisco telepresence_video_communication_server x15.0.0 Yes
Application cisco telepresence_video_communication_server x15.0.1 Yes
References