Vulnerabilities (CVE)

Filtered by vendor Pexip Subscribe
Filtered by product Pexip Infinity
Total 47 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-7177 1 Pexip 1 Pexip Infinity 2026-06-17 9.0 HIGH 7.2 HIGH
Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin.
CVE-2018-10585 1 Pexip 1 Pexip Infinity 2026-06-17 7.8 HIGH 7.5 HIGH
Pexip Infinity before 18 allows remote Denial of Service (XML parsing).
CVE-2018-10432 1 Pexip 1 Pexip Infinity 2026-06-17 7.8 HIGH 7.5 HIGH
Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP).
CVE-2017-6551 1 Pexip 1 Pexip Infinity 2026-06-17 7.5 HIGH 9.8 CRITICAL
Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Conferencing Nodes.
CVE-2017-17477 1 Pexip 1 Pexip Infinity 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views.
CVE-2015-4719 1 Pexip 1 Pexip Infinity 2026-06-17 7.5 HIGH 9.8 CRITICAL
The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request.
CVE-2014-8779 1 Pexip 1 Pexip Infinity 2026-06-17 7.1 HIGH N/A
Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys.