VendorsNCH Softwareaxon_pbxany version
Vulnerabilities

NCH Software Axon Pbx any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2021-37457
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).
Published 2021-07-25 · Modified
5.4EPSS 0.006
CVE-2021-37458
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
Published 2021-07-25 · Modified
5.4EPSS 0.006
CVE-2021-37459
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
Published 2021-07-25 · Modified
5.4EPSS 0.006
CVE-2021-37453
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).
Published 2021-07-25 · Modified
5.4EPSS 0.006
CVE-2021-37454
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).
Published 2021-07-25 · Modified
5.4EPSS 0.006
CVE-2021-37455
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).
Published 2021-07-25 · Modified
5.4EPSS 0.006
CVE-2021-37456
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).
Published 2021-07-25 · Modified
5.4EPSS 0.006
CVE-2021-37460
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
Published 2021-07-25 · Modified
5.4EPSS 0.006
CVE-2021-37461
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
Published 2021-07-25 · Modified
5.4EPSS 0.006
CVE-2021-37462
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
Published 2021-07-25 · Modified
5.4EPSS 0.006