Zenitel

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Zenitel records in CISA KEV

No Zenitel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tcis-3 Firmware 3 records MEDIUM Icx500 Firmware 2 records MEDIUM Icx510 Firmware 2 records MEDIUM Ip-stationweb Firmware 2 records LOW Alphacom Xe Audio Server 1 record MEDIUM

Records

2 records in Ip-stationweb Firmware · all components

TI-2018-14119 CVE-2018-19926 · GHSA-93f7-wqqw-xv5m

Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH_INFO.

LOW 28

Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH_INFO.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00725 Published 2018-12-06 No fix listed CWE-79

TI-2018-14120 CVE-2018-19927 · GHSA-c7qj-g8mp-6q7h

Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for…

LOW 23

Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zForm_save_changes sip_nick parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00604 Published 2018-12-06 No fix listed CWE-79

Open these records in search →

Critical	7
High	8
Medium	3
Low	0
No CVSS	0