Vocera develops a focused set of enterprise healthcare communication products—including its report server, voice server, and wireless handset platforms—that operate within sensitive clinical and administrative environments. Vulnerabilities affecting the vendor skew toward serious outcomes, with a meaningful share reaching critical severity, and recur through weaknesses including path traversal, resource-sphere exposure, input validation flaws, and unrestricted file uploads that reflect the file-handling and access-control demands of web-facing healthcare infrastructure. Current exploitation activity and severity counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Vocera over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-46898CRITICAL An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal via the "restore SQL data" filename. The Vocera Report Console contains a | Jul 25, 2023 | 9.8 | 24 | NO | NO |
CVE-2022-46902HIGH An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip operation. The Vocera Report Console contains a websocket f | Jul 25, 2023 | 7.5 | 19 | NO | NO |
CVE-2022-46901HIGH An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a | Jul 25, 2023 | 7.5 | 19 | NO | NO |
CVE-2022-46899HIGH An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers der | Jul 25, 2023 | 7.5 | 19 | NO | NO |
CVE-2022-46900MEDIUM An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal in the Task Exec filename. The Vocera Report Console contains various jobs | Jul 25, 2023 | 6.5 | 17 | NO | NO |
CVE-2008-1114MEDIUM Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access po | Mar 3, 2008 | 4.3 | 15 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Vocera.
Media articles that mention a CVE ID that affects a product developed by Vocera — matched by CVE ID, not by vendor name.