| CVE-2022-26655 | 高7.5 | Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a software abort via a gateway call into Teams. | 17/07/2022 |
| CVE-2022-26654 | 高7.5 | Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP. | 17/07/2022 |
| CVE-2022-25357 | 中5.3 | Pexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a conference (call join) if it has a lock but not a PIN. | 17/07/2022 |
| CVE-2022-23228 | 高7.5 | Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service. | 18/02/2022 |
| CVE-2021-29656 | 緊急9.8 | Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked. | 18/02/2022 |
| CVE-2021-29655 | 緊急9.8 | Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute. | 18/02/2022 |
| CVE-2021-42555 | 高7.5 | Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation. | 15/01/2022 |
| CVE-2021-35969 | 高7.5 | Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validation. | 15/01/2022 |
| CVE-2021-33499 | 高7.5 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2). | 15/01/2022 |
| CVE-2021-33498 | 高7.5 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2). | 15/01/2022 |
| CVE-2021-32545 | 高7.5 | Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation. | 15/01/2022 |
| CVE-2021-31925 | 高7.5 | Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface. | 07/07/2021 |
| CVE-2020-25868 | 高7.5 | Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote attacker can trigger a software abort (temporary loss of service). | 07/07/2021 |
| CVE-2020-24615 | 中5.3 | Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP. | 25/09/2020 |
| CVE-2020-13387 | 高7.5 | Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323. | 25/09/2020 |
| CVE-2020-12824 | 高7.5 | Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP. | 25/09/2020 |
| CVE-2020-11805 | 緊急9.8 | Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN. | 25/09/2020 |
| CVE-2019-7178 | 高7.2 | Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup. | 25/09/2020 |
| CVE-2019-7177 | 高7.2 | Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin. | 25/09/2020 |
| CVE-2018-10585 | 高7.5 | Pexip Infinity before 18 allows remote Denial of Service (XML parsing). | 25/09/2020 |