Pexip Infinity

pexip_infinity

Vendor: Pexip • 57 CVEs

CVEs (57)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-37917 1Pexip 1Pexip Infinity Jun 17, 2026 Apr 2, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (software abort) via a crafted signalling message.
CVE-2024-33850 1Pexip 1Pexip Infinity Jun 17, 2026 Jun 10, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain actions that should not be allowed before they are admitted to the meetin...Show more Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain actions that should not be allowed before they are admitted to the meeting.Show less
CVE-2023-37225 1Pexip 1Pexip Infinity Jun 17, 2026 Dec 25, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links.
CVE-2023-31455 1Pexip 1Pexip Infinity Jun 17, 2026 Dec 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort.
CVE-2023-31289 1Pexip 1Pexip Infinity Jun 17, 2026 Dec 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort.
CVE-2022-32263 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719.
CVE-2022-29286 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling.
CVE-2022-27937 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264.
CVE-2022-27936 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323.
CVE-2022-27935 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth.
CVE-2022-27934 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP.
CVE-2022-27933 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 8.2 HIGH· v3 5.8 MEDIUM· v2 Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
CVE-2022-27932 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
CVE-2022-27931 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.
CVE-2022-27930 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is guessed.
CVE-2022-27929 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP.
CVE-2022-27928 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.
CVE-2022-26657 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
CVE-2022-26656 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 8.2 HIGH· v3 6.4 MEDIUM· v2 Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join.
CVE-2022-26655 1Pexip 1Pexip Infinity Jun 17, 2026 Jul 17, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a software abort via a gateway call into Teams.

Previous 123 Next