74/100
A vulnerability in the database service feature of Cisco Expressway Series could let an unauthenticated remote attacker with network access run arbitrary OS commands as root. It stems from the use of persistent cookies and insufficient client certificate validation for clustering when TLS Verify Mode is enabled. Expressway administrators should upgrade to the fixed software.