Skip to content

Polycom · no weakness in the record

No weakness recorded

10 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

  1. Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.CVE-2002-1905Polycom · 7.5% likely
  2. The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) by sending incomplete HTTP requests and leaving the connecti…CVE-2002-1906Polycom · 7.1% likely
  3. Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service (reboot) via (1) a long URL sent to the HTTP daemon…CVE-2006-5233Polycom · 1.8% likely
  4. Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service (device reboot) via a malfor…CVE-2007-3368Polycom · 1.8% likely
  5. Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.CVE-2002-0626Polycom · 1.8% likely
  6. Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process.CVE-2021-41322Polycom · 1.7% likely
  7. The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests.CVE-2002-0627Polycom · 1.6% likely
  8. The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connections to the server.CVE-2002-0629Polycom · 1.6% likely
  9. The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via long or malformed ICMP packets.CVE-2002-0630Polycom · 1.6% likely
  10. Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, as demonstrated using the blast TCP str…CVE-2003-0556Polycom · 1.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.