pexip Vulnerability Advisory Catalog

Total 55 security vulnerabilities recorded for pexip software and firmware.

← Back to All Vendors
Component: pexip_infinity

Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signall...

📅 2025-12-25
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a cra...

📅 2025-12-25
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams t...

📅 2025-12-25
CVSS 5.9 Dossier →
Component: pexip_infinity

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access ...

📅 2025-12-25
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, when used with Office 365 Legac...

📅 2025-12-25
CVSS 8.2 Dossier →
Component: pexip_infinity

Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validatio...

📅 2025-12-25
CVSS 5.9 Dossier →
Component: pexip_infinity

Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resultin...

📅 2025-12-25
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting...

📅 2025-12-25
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signall...

📅 2025-12-25
CVSS 7.5 Dossier →
Component: pexip_infinity

Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of s...

📅 2025-04-02
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (software abort) via a crafted si...

📅 2025-04-02
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain act...

📅 2024-06-10
CVSS 4.3 Dossier →
Component: virtual_meeting_rooms

In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authentication bypass...

📅 2023-12-25
CVSS 5.3 Dossier →
Component: pexip_infinity

Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links....

📅 2023-12-25
CVSS 6.1 Dossier →
Component: pexip_infinity

Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort....

📅 2023-12-25
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort....

📅 2023-12-25
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719....

📅 2022-07-17
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandl...

📅 2022-07-17
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264....

📅 2022-07-17
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323....

📅 2022-07-17
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth....

📅 2022-07-17
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP....

📅 2022-07-17
CVSS 7.5 Dossier →
Component: pexip_infinity

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join....

📅 2022-07-17
CVSS 8.2 Dossier →
Component: pexip_infinity

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join....

📅 2022-07-17
CVSS 7.5 Dossier →
Page 1 of 3 (55 Total Records)