Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Maximiser_soft_pbx
(Splicecom)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 3 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-01-25 | CVE-2023-33758 | Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT_NAME and DEVICE_GUID fields in the login component. | Maximiser_soft_pbx | 6.1 | ||
| 2024-01-25 | CVE-2023-33760 | SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on communications via a man-in-the-middle attack. | Maximiser_soft_pbx | 5.3 | ||
| 2024-01-25 | CVE-2023-33759 | SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force attack. | Maximiser_soft_pbx | 9.8 |