İçeriğe atla
Noroxi

FreePBX kayıtları

freepbx üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %7,1
Pre-auth RCE
2
Düzeltme kaydı olan
%7,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 24
  3. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

14 kayıt
  • CVE-2014-7235
    53Planlayın

    htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 bef

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    freepbx · freepbx7 Eki 2014

  • CVE-2014-1903
    46Planlayın

    admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22

    YüksekCVSS 7,5SilahlaştırılmışEPSS %53

    freepbx · freepbx18 Şub 2014

  • CVE-2026-40520
    35İzleyin

    FreePBX api module Command Injection via GraphQL

    YüksekCVSS 8,6İstismar yokEPSS %2

    freepbx · api21 Nis 2026

  • CVE-2007-2191
    28İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web script or HTML via the (

    OrtaCVSS 6,8Kavram kanıtıEPSS %4

    freepbx · freepbx24 Nis 2007

  • CVE-2007-2350
    27İzleyin

    admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via s

    OrtaCVSS 6,5İstismar yokEPSS %2

    freepbx · freepbx30 Nis 2007

  • CVE-2009-1802
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow r

    OrtaCVSS 6,8İstismar yokEPSS %1

    freepbx · freepbx28 May 2009

  • CVE-2024-47071
    27İzleyin

    OSS Endpoint Manager allows unauthorized access to read system files

    OrtaCVSS 6,8İstismar yokEPSS %1

    freepbx · endpointman1 Eki 2024

  • CVE-2019-16967
    24İzleyin

    An issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14.0.10.3.

    OrtaCVSS 6,1İstismar yokEPSS %1

    freepbx · manager21 Eki 2019

  • CVE-2019-16966
    24İzleyin

    An issue was discovered in Contactmanager 13.x before 13.0.45.3, 14.x before 14.0.5.12, and 15.x before 15.0.8.21 for FreePBX 14.0.10.3.

    OrtaCVSS 6,1İstismar yokEPSS %1

    freepbx · contactmanager21 Eki 2019

  • CVE-2009-1803
    20İzleyin

    FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed login attempt dependi

    OrtaCVSS 5,0İstismar yokEPSS %1

    freepbx · freepbx28 May 2009

  • CVE-2018-15891
    19İzleyin

    An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4.

    OrtaCVSS 4,8İstismar yokEPSS %1

    freepbx · freepbx20 Haz 2019

  • CVE-2009-4458
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow remote attackers to in

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    freepbx · freepbx29 Ara 2009

  • CVE-2009-1801
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote a

    OrtaCVSS 4,3İstismar yokEPSS %1

    freepbx · freepbx28 May 2009

  • CVE-2018-15892
    17İzleyin

    FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page.

    OrtaCVSS 4,3İstismar yokEPSS %1

    freepbx · disa20 Haz 2019