Axon Pbx

CVEs (14)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-37441	Nch Axon Pbx	Hig	0.57	8.8	0.01	Jul 25, 2021	NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring.
CVE-2018-11551	Axon PBX	Hig	0.51	7.8	0.03	Jun 1, 2018	AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability exists because a DLL file is loaded by 'pbxsetup.exe' improperly.
CVE-2021-37440	Nch Axon Pbx	Med	0.42	6.5	0.01	Jul 25, 2021	NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.
CVE-2018-11552	Axon PBX	Med	0.42	6.1	0.29	Jun 1, 2018	There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitrary HTML and script code in a browser in the context of the…
CVE-2021-37462	Nch Axon Pbx	Med	0.35	5.4	0.01	Jul 25, 2021	Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
CVE-2021-37461	Nch Axon Pbx	Med	0.35	5.4	0.01	Jul 25, 2021	Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
CVE-2021-37460	Nch Axon Pbx	Med	0.35	5.4	0.01	Jul 25, 2021	Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
CVE-2021-37459	Nch Axon Pbx	Med	0.35	5.4	0.01	Jul 25, 2021	Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
CVE-2021-37458	Nch Axon Pbx	Med	0.35	5.4	0.01	Jul 25, 2021	Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
CVE-2021-37457	Nch Axon Pbx	Med	0.35	5.4	0.01	Jul 25, 2021	Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).
CVE-2021-37456	Nch Axon Pbx	Med	0.35	5.4	0.01	Jul 25, 2021	Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).
CVE-2021-37455	Nch Axon Pbx	Med	0.35	5.4	0.01	Jul 25, 2021	Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).
CVE-2021-37454	Nch Axon Pbx	Med	0.35	5.4	0.01	Jul 25, 2021	Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).
CVE-2021-37453	Nch Axon Pbx	Med	0.35	5.4	0.01	Jul 25, 2021	Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).

CVE-2021-37441HigJul 25, 2021
Nch
Axon Pbx
risk 0.57cvss 8.8epss 0.01
NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring.
CVE-2018-11551HigJun 1, 2018
Axon
PBX
risk 0.51cvss 7.8epss 0.03
AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability exists because a DLL file is loaded by 'pbxsetup.exe' improperly.
CVE-2021-37440MedJul 25, 2021
Nch
Axon Pbx
risk 0.42cvss 6.5epss 0.01
NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.
CVE-2018-11552MedJun 1, 2018
Axon
PBX
risk 0.42cvss 6.1epss 0.29
There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitrary HTML and script code in a browser in the context of the…
CVE-2021-37462MedJul 25, 2021
Nch
Axon Pbx
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
CVE-2021-37461MedJul 25, 2021
Nch
Axon Pbx
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
CVE-2021-37460MedJul 25, 2021
Nch
Axon Pbx
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
CVE-2021-37459MedJul 25, 2021
Nch
Axon Pbx
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
CVE-2021-37458MedJul 25, 2021
Nch
Axon Pbx
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
CVE-2021-37457MedJul 25, 2021
Nch
Axon Pbx
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).
CVE-2021-37456MedJul 25, 2021
Nch
Axon Pbx
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).
CVE-2021-37455MedJul 25, 2021
Nch
Axon Pbx
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).
CVE-2021-37454MedJul 25, 2021
Nch
Axon Pbx
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).
CVE-2021-37453MedJul 25, 2021
Nch
Axon Pbx
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).