Vendor/product archive

pascom / cloud_phone_system CVEs

Beta · best-effort

3 CVEs tagged to pascom / cloud_phone_system — 2 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to pascom vendor archive

CVE-2021-45968

Published Mar 18, 2022

An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Phone System before 7.20.x (and in other products). An endpoin…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-45967

Published Mar 18, 2022

An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server,…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-45966

Published Mar 18, 2022

An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.pl allows remote attackers to execute arbitrary code via she…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1