3CX

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

3CX records in CISA KEV

No 3CX vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Live Chat 13 records MEDIUM 3cx 12 records HIGH 3cx Web Server 3 records LOW Phone System 3 records LOW Phone System Firmware 2 records MEDIUM Call Flow Designer 1 record LOW Crm Template Generator 1 record LOW

Records

3 records in Phone System · all components

TI-2008-06583 CVE-2008-6895 · GHSA-hgp8-6q2r-w5fr

3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service (unstable…

LOW 36

3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service (unstable service or crash) via unspecified vectors, as demonstrated by vulnerability scans from Nessus or SAINT.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0121 Published 2009-08-03 No fix listed

TI-2008-06584 CVE-2008-6896 · GHSA-vmx2-4645-684q

login.php in 3CX Phone System 6.0.806.0, when 100% disk capacity is reached, allows…

LOW 25

login.php in 3CX Phone System 6.0.806.0, when 100% disk capacity is reached, allows remote attackers to gain sensitive information via unspecified vectors that reveal the installation path.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01064 Published 2009-08-03 No fix listed CWE-200

TI-2008-06582 CVE-2008-6894 · GHSA-6wxf-x72r-7h7m

Multiple cross-site scripting (XSS) vulnerabilities in login.php in 3CX Phone System Free…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fName and (2) fPassword par…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-08-03 No fix listed CWE-79

Open these records in search →

Critical	6
High	10
Medium	18
Low	0
No CVSS	0