Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

nchsoftware / axon_pbx CVEs

Beta · best-effort

10 CVEs tagged to nchsoftware / axon_pbx — 0 Critical, 0 High, 10 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to nchsoftware vendor archive

CVE-2021-37462

Published Jul 25, 2021

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-37461

Published Jul 25, 2021

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-37460

Published Jul 25, 2021

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-37459

Published Jul 25, 2021

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-37458

Published Jul 25, 2021

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-37457

Published Jul 25, 2021

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-37456

Published Jul 25, 2021

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-37455

Published Jul 25, 2021

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-37454

Published Jul 25, 2021

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-37453

Published Jul 25, 2021

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-10 of 10 CVEsPage 1 of 1