Login Request a demo
3C
Product
3cx
by 3cx · last CVE May 3, 2024
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 3High 6Medium 3Low 0
Severity
All severities12Critical3High6Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add 3cx to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-49954
9.8
2%
Dec 25
The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address
Affected: before 18.0.9.23; 20.0 before 20.0.0.1494
CVE-2022-28005
9.8
8%
May 6
An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL
Affected: through 18.0.3.450
CVE-2021-45490
9.1
1%
Mar 28
The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate validation
Affected: through 18.0.4; through 18.0.11; through 2022-03-17
Showing 3