Nchsoftware Axon Pbx
10 CVEs affecting Nchsoftware Axon Pbx. Latest disclosed: 2021-07-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-37462 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected). |
CVE-2021-37461 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected). |
CVE-2021-37460 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected). |
CVE-2021-37459 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored). |
CVE-2021-37458 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored). |
CVE-2021-37457 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored). |
CVE-2021-37456 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored). |
CVE-2021-37455 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored). |
CVE-2021-37454 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored). |
CVE-2021-37453 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored). |