Vendors / Yealink Records 43 All Threatist records
Exploited (KEV) 1
CVSS critical 8
CVSS high 16
Exploited now Yealink records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 51
Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file upload interface.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01132 · Published 2024-02-08 · No fix listed CWE-94
Priority LOW 39
Yealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a front-end JS file and decrypt the plaintext passwords based on the obtained key information.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00379 · Published 2024-11-01 · No fix listed CWE-922
Priority LOW 39
Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00478 · Published 2024-11-01 · No fix listed CWE-922
Open these records in search → All records by CVSS severity
8 16 15 4 0
