Vulnerabilities
Vulnerable Software
Security Vulnerabilities - CVEs Published In July 2021
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).
CVSS Score
5.4
EPSS Score
0.002
Published
2021-07-25
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
CVSS Score
5.4
EPSS Score
0.002
Published
2021-07-25
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
CVSS Score
5.4
EPSS Score
0.002
Published
2021-07-25
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
CVSS Score
5.4
EPSS Score
0.002
Published
2021-07-25
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
CVSS Score
5.4
EPSS Score
0.002
Published
2021-07-25
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
CVSS Score
5.4
EPSS Score
0.002
Published
2021-07-25
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).
CVSS Score
5.4
EPSS Score
0.002
Published
2021-07-25
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).
CVSS Score
5.4
EPSS Score
0.002
Published
2021-07-25
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).
CVSS Score
5.4
EPSS Score
0.002
Published
2021-07-25
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).
CVSS Score
5.4
EPSS Score
0.002
Published
2021-07-25


Contact Us

Shodan ® - All rights reserved