3C
Product
3cx
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 3Low 0
Watch
Add 3cx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-27362 | 7.8 | May 3 | 3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability Affected: 18.0.0.451 before 18.0.8.917 |
| CVE-2023-29059 | 7.8 | Mar 30 | 3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023 Affected: 18.11.1213; 18.12.402; 18.12.407; 18.12.407; 18.12.416; 18.12.416 |
| CVE-2019-14935 | 7.8 | Aug 12 | 3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for Windows\PhoneApp" installation directory, allowing Full Control access for Everyone, and… Affected: 15 |
| CVE-2022-48483 | 7.5 | May 2 | 3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/download directory traversal in… Affected: before 18.0.3.461 |
| CVE-2022-48482 | 7.5 | May 2 | 3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal Affected: before 18.0.2.315 |
| CVE-2019-13176 | 7.5 | Aug 8 | An issue was discovered in the 3CX Phone system (web) management console 12.5.44178.1002 through 12.5 SP2 Affected: 12.5; 12.5; 12.5.44178.1002 |
Showing 6