| CVE-2024-37917 | 高7.5 | Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (software abort) via a crafted signalling message. | 02/04/2025 |
| CVE-2024-33850 | 中4.3 | Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain actions that should not be allowed before they are admitted to the meeting. | 10/06/2024 |
| CVE-2023-40236 | 中5.3 | In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authentication bypass. | 25/12/2023 |
| CVE-2023-37225 | 中6.1 | Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links. | 25/12/2023 |
| CVE-2023-31455 | 高7.5 | Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort. | 25/12/2023 |
| CVE-2023-31289 | 高7.5 | Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort. | 25/12/2023 |
| CVE-2022-32263 | 高7.5 | Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719. | 17/07/2022 |
| CVE-2022-29286 | 高7.5 | Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling. | 17/07/2022 |
| CVE-2022-27937 | 高7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264. | 17/07/2022 |
| CVE-2022-27936 | 高7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323. | 17/07/2022 |
| CVE-2022-27935 | 高7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth. | 17/07/2022 |
| CVE-2022-27934 | 高7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP. | 17/07/2022 |
| CVE-2022-27933 | 高8.2 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. | 17/07/2022 |
| CVE-2022-27932 | 高7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. | 17/07/2022 |
| CVE-2022-27931 | 高7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol. | 17/07/2022 |
| CVE-2022-27930 | 中5.9 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is guessed. | 17/07/2022 |
| CVE-2022-27929 | 高7.5 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP. | 17/07/2022 |
| CVE-2022-27928 | 高7.5 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol. | 17/07/2022 |
| CVE-2022-26657 | 高7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. | 17/07/2022 |
| CVE-2022-26656 | 高8.2 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join. | 17/07/2022 |