Login Request a demo
3C
Product
3cx
by 3cx · last CVE May 3, 2024
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 3High 6Medium 3Low 0
Severity
All severities12Critical3High6Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add 3cx to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-45491
6.5
1%
Mar 28
3CX System through 2022-03-17 stores cleartext passwords in a database
Affected: through 2022-03-17
CVE-2018-7654
6.5
2%
Mar 4
On 3CX 15.5.6354.2 devices, the parameter "file" in the request "/api/RecordingList/download?file=" allows full access to files on the server via path traversal
Affected: 15.5.6354.2
CVE-2017-15359
6.5
6%
Oct 18
In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory traversal attack: "/api/RecordingList/DownloadRecord?file="…
Affected: 15.5.3554.1
Showing 3