EL
Vendor
Eleveo
26
CVEs
0
On KEV
2
New 30D
Products
CR6.3
Call Recording Software
Eleveo
16 CVEs0 on KEV2 new
QM6.3
Quality Management
Eleveo
7 CVEs0 on KEV0 new
CR10.0
Call Recording
Eleveo
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108809 | CR Call Recording Software Eleveo | 3.5 | Oct 12 | Eleveo Call Recording Software logout session expiration |
| CVE-2026-108808 | CR Call Recording Software Eleveo | 2.6 | Oct 12 | Eleveo Call Recording Software JWT Token logout get request method with sensitive query strings |
| CVE-2026-101146 | QM Quality Management Eleveo | 4.3 | Sep 28 | Eleveo Quality Management GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure |
| CVE-2026-101145 | CR Call Recording Software Eleveo | 4.3 | Sep 28 | Eleveo Call Recording Software User Management userAddAction.do ldap injection |
| CVE-2026-101144 | CR Call Recording Software Eleveo | 6.3 | Sep 28 | Eleveo Call Recording Software Query Builder searchAction.do access control |
| CVE-2026-101143 | QM Quality Management Eleveo | 4.3 | Sep 28 | Eleveo Quality Management QMBODownload information disclosure |
| CVE-2026-101142 | QM Quality Management Eleveo | 6.3 | Sep 28 | Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal |
| CVE-2026-101141 | CR Call Recording Software Eleveo | 3.5 | Sep 28 | Eleveo Call Recording Software Play Audio audio.jsp cross site scripting |
| CVE-2026-85409 | QM Quality Management Eleveo | 6.3 | Sep 4 | Eleveo Quality Management Questionnaire Service QuestionnaireService.runDataExportNow path traversal |
| CVE-2026-85408 | QM Quality Management Eleveo | 4.3 | Sep 4 | Eleveo Quality Management Conversation events dynamically-determined object attributes |
| CVE-2026-85407 | QM Quality Management Eleveo | 4.3 | Sep 4 | Eleveo Quality Management Conversation events denial of service |
| CVE-2026-85406 | QM Quality Management Eleveo | 3.5 | Sep 4 | Eleveo Quality Management Conversation Review cross site scripting |
| CVE-2026-85405 | CR Call Recording Software Eleveo | 3.5 | Sep 4 | Eleveo Call Recording Software roleAddAction.do cross site scripting |
| CVE-2026-15474 | CR Call Recording Software Eleveo | 4.3 | Jul 12 | Eleveo Call Recording Software audio.jsp improper authorization |
| CVE-2026-15473 | CR Call Recording Software Eleveo | 6.3 | Jul 12 | Eleveo Call Recording Software Recorded Calls restoreCallAction.do improper authorization |
| CVE-2026-15472 | CR Call Recording Software Eleveo | 4.3 | Jul 12 | Eleveo Call Recording Software composeEmailAction.do improper authorization |
| CVE-2026-15471 | CR Call Recording Software Eleveo | 4.3 | Jul 12 | Eleveo Call Recording Software pci_dss_status.jsp improper authorization |
| CVE-2026-15470 | CR Call Recording Software Eleveo | 4.3 | Jul 11 | Eleveo Call Recording Software group.jsp improper authorization |
| CVE-2026-15377 | CR Call Recording Software Eleveo | 4.3 | Jul 10 | Eleveo Call Recording Software sendlogfile improper authorization |
| CVE-2026-15376 | CR Call Recording Software Eleveo | 6.3 | Jul 10 | Eleveo Call Recording Software statisticReportAction.do improper authorization |
| CVE-2026-15375 | CR Call Recording Software Eleveo | 4.3 | Jul 10 | Eleveo Call Recording Software LDAP User users_ldap.jsp improper authorization |
| CVE-2026-15374 | CR Call Recording Software Eleveo | 6.3 | Jul 10 | Eleveo Call Recording Software Group roleAddAction.do improper authorization |
| CVE-2026-15373 | CR Call Recording Software Eleveo | 6.3 | Jul 10 | Eleveo Call Recording Software userAddAction.do improper authorization |
| CVE-2019-19810 | CR Call Recording Eleveo | 10.0 | Oct 28 | Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service |
| CVE-2019-18223 | CR Call Recording Eleveo | 5.4 | Apr 27 | ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1) User Edit or (2) User Add form, (3)… |
| CVE-2019-18822 | CR Call Recording Eleveo | 8.8 | Apr 14 | A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account (i.e., the account under which the program runs - by default, the callrec account) to… |