CVE-2019-1720

A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service (DoS) condition on an affected system. The vulnerability is due to improper handling of the XML input. An attacker could exploit this vulnerability by sending a specifically crafted XML payload. A successful exploit could allow the attacker to exhaust CPU resources, resulting in a DoS condition until the system is manually rebooted. Software versions prior to X12.5.1 are affected.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/108002Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-ces-tvcs-dosVendor Advisory
• http://www.securityfocus.com/bid/108002Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-ces-tvcs-dosVendor Advisory

Published

Apr 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17190A Local Privilege Escalation issue was discovered in Avast S…7.8
• CVE-2019-17191The Signal Private Messenger application before 4.47.7 for A…7.5
• CVE-2019-17192The WebRTC component in the Signal Private Messenger applica…9.8
• CVE-2019-17195Connect2id Nimbus JOSE+JWT before v7.9 can throw various unc…9.8
• CVE-2019-17197OpenEMR through 5.0.2 has SQL Injection in the Lifestyle dem…9.8
• CVE-2019-17199www/getfile.php in WPO WebPageTest 19.04 on Windows allows D…7.5
• CVE-2019-17201FastTrack Admin By Request 6.1.0.0 supports group policies t…7.8
• CVE-2019-17202FastTrack Admin By Request 6.1.0.0 supports group policies t…7.8
• CVE-2019-17203TeamPass 2.1.27.36 allows Stored XSS at the Search page by s…5.4
• CVE-2019-17204TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Kn…5.4
• CVE-2019-17205TeamPass 2.1.27.36 allows Stored XSS by placing a payload in…6.1
• CVE-2019-17206Uncontrolled deserialization of a pickled object in models.p…9.8