dialogic records
10 published records for vendor dialogic.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-798 Use of Hard-coded Credentials2
- CWE-522 Insufficiently Protected Credentials2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-352 Cross-Site Request Forgery (CSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2018-11635No exploit | Use of a Hard-coded Cryptographic Key used to protect cookie session data in /var/www/xms/application/config/config.php in the administrativdialogic · powermedia xms · CWE-798 | Critical9.8 | — | 1.9% | Jul 3, 2018 |
40Plan | CVE-2018-11641No exploit | Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XMdialogic · powermedia xms · CWE-798 | Critical9.8 | — | 1.7% | Jul 3, 2018 |
37Monitor | CVE-2018-11640No exploit | XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitradialogic · powermedia xms · CWE-611 | Critical9.1 | — | 1.8% | Jul 3, 2018 |
35Monitor | CVE-2018-11643No exploit | SQL injection vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to executdialogic · powermedia xms · CWE-89 | High8.8 | — | 1.3% | Jul 3, 2018 |
35Monitor | CVE-2018-11636No exploit | Cross-site request forgery (CSRF) vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackersdialogic · powermedia xms · CWE-352 | High8.8 | — | 0.6% | Jul 3, 2018 |
32Monitor | CVE-2018-11639No exploit | Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialodialogic · powermedia xms · CWE-522 | High8.1 | — | 1.1% | Jul 3, 2018 |
31Monitor | CVE-2018-11637No exploit | Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitdialogic · powermedia xms · CWE-59 | High7.5 | — | 2.0% | Jul 3, 2018 |
31Monitor | CVE-2018-11642No exploit | Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows dialogic · powermedia xms · CWE-732 | High7.8 | — | 0.5% | Jul 3, 2018 |
31Monitor | CVE-2018-11634No exploit | Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web dialogic · powermedia xms · CWE-522 | High7.8 | — | 0.3% | Jul 3, 2018 |
29Monitor | CVE-2018-11638No exploit | Unrestricted Upload of a File with a Dangerous Type in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authedialogic · powermedia xms · CWE-434 | High7.2 | — | 4.0% | Jul 3, 2018 |
- CVE-2018-1163540Plan
Use of a Hard-coded Cryptographic Key used to protect cookie session data in /var/www/xms/application/config/config.php in the administrativ
CriticalCVSS 9.8No exploitEPSS 1%dialogic · powermedia xmsJul 3, 2018
- CVE-2018-1164140Plan
Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XM
CriticalCVSS 9.8No exploitEPSS 1%dialogic · powermedia xmsJul 3, 2018
- CVE-2018-1164037Monitor
XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitra
CriticalCVSS 9.1No exploitEPSS 1%dialogic · powermedia xmsJul 3, 2018
- CVE-2018-1164335Monitor
SQL injection vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to execut
HighCVSS 8.8No exploitEPSS 1%dialogic · powermedia xmsJul 3, 2018
- CVE-2018-1163635Monitor
Cross-site request forgery (CSRF) vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers
HighCVSS 8.8No exploitEPSS 0%dialogic · powermedia xmsJul 3, 2018
- CVE-2018-1163932Monitor
Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialo
HighCVSS 8.1No exploitEPSS 1%dialogic · powermedia xmsJul 3, 2018
- CVE-2018-1163731Monitor
Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbit
HighCVSS 7.5No exploitEPSS 2%dialogic · powermedia xmsJul 3, 2018
- CVE-2018-1164231Monitor
Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows
HighCVSS 7.8No exploitEPSS 0%dialogic · powermedia xmsJul 3, 2018
- CVE-2018-1163431Monitor
Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web
HighCVSS 7.8No exploitEPSS 0%dialogic · powermedia xmsJul 3, 2018
- CVE-2018-1163829Monitor
Unrestricted Upload of a File with a Dangerous Type in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authe
HighCVSS 7.2No exploitEPSS 4%dialogic · powermedia xmsJul 3, 2018