https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-20853.htmlhttps://patchthecve.com/cve/CVE-2022-20853.htmlWed, 17 Jun 2026 04:25:15 +0000HIGH 7.4: A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-basedhttps://patchthecve.com/cve/CVE-2022-20814.htmlhttps://patchthecve.com/cve/CVE-2022-20814.htmlWed, 17 Jun 2026 04:25:10 +0000HIGH 7.4: A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data.  The vulnerability is due to a lack of validation of the SSL server certificate that an afhttps://patchthecve.com/cve/CVE-2024-20400.htmlhttps://patchthecve.com/cve/CVE-2024-20400.htmlWed, 17 Jun 2026 07:06:56 +0000MEDIUM 4.7: A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerabil