Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Axon_pbx
(Nchsoftware)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 10 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2021-07-25 | CVE-2021-37453 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored). | Axon_pbx | 5.4 | ||
| 2021-07-25 | CVE-2021-37454 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored). | Axon_pbx | 5.4 | ||
| 2021-07-25 | CVE-2021-37456 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored). | Axon_pbx | 5.4 | ||
| 2021-07-25 | CVE-2021-37455 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored). | Axon_pbx | 5.4 | ||
| 2021-07-25 | CVE-2021-37457 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored). | Axon_pbx | 5.4 | ||
| 2021-07-25 | CVE-2021-37458 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored). | Axon_pbx | 5.4 | ||
| 2021-07-25 | CVE-2021-37459 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored). | Axon_pbx | 5.4 | ||
| 2021-07-25 | CVE-2021-37461 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected). | Axon_pbx | 5.4 | ||
| 2021-07-25 | CVE-2021-37460 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected). | Axon_pbx | 5.4 | ||
| 2021-07-25 | CVE-2021-37462 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected). | Axon_pbx | 5.4 |