Vendors / Voipmonitor Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 1
Exploited now Voipmonitor records in CISA KEV No Voipmonitor vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.49992 · Published 2022-02-04 · No fix listed CWE-89
Priority HIGH 68
A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.36632 · Published 2021-05-29 · No fix listed CWE-94
Priority MEDIUM 46
An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02001 · Published 2022-02-04 · No fix listed CWE-287
Priority MEDIUM 44
VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01164 · Published 2022-06-17 · No fix listed CWE-89
Priority MEDIUM 42
The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01825 · Published 2022-02-04 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
4 1 0 0 0
THREATIST.IORead the docs