PI
Product
Pexip Infinity
57
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 6High 42Medium 8Low 0
Watch
Add Pexip Infinity to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-37225 | 6.1 | Dec 25 | Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links Affected: before 32.0 |
| CVE-2017-17477 | 6.1 | Sep 25 | Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views Affected: 10 before 17 |
| CVE-2025-49088 | 5.9 | Dec 25 | Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the OTJ service,… Affected: 32.0 before 37.2 |
| CVE-2022-27930 | 5.9 | Jul 17 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is guessed Affected: 27.0 before 27.3 |
| CVE-2025-66443 | 5.3 | Dec 25 | Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that allows an attacker… Affected: 35.0 before 39.0 |
| CVE-2022-25357 | 5.3 | Jul 17 | Pexip Infinity 27.x before 27.2 has Improper Access Control Affected: 27.0 before 27.2 |
| CVE-2020-24615 | 5.3 | Sep 25 | Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP Affected: before 24.1 |
| CVE-2024-33850 | 4.3 | Jun 10 | Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room Affected: before 34.1 |
Showing 8