Splicecom Maximiser Soft Pbx
3 CVEs affecting Splicecom Maximiser Soft Pbx. Latest disclosed: 2024-01-25. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33759 | Critical | 9.8 | 2024-01-25 | SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force… |
CVE-2023-33758 | Medium | 6.1 | 2024-01-25 | Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT_NAME and DEVICE_GUID fields in… |
CVE-2023-33760 | Medium | 5.3 | 2024-01-25 | SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on communications… |