Vulnerabilities

3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/download directory traversal in conjunction with a path component that has a drive…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02008 Published 2023-05-02 No fix listed CWE-22

TI-2022-24062 CVE-2022-48482 · GHSA-2hcc-5pm7-xc33

3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated…

HIGH 72

3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02194 Published 2023-05-02 No fix listed CWE-22

TI-2023-13509 CVE-2023-29059 · GHSA-m2q7-9c76-qc45

3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in…

HIGH 69

3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04373 Published 2023-03-30 No fix listed

TI-2019-07338 CVE-2019-9972 · GHSA-9wgp-3xm8-wjwj

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows…

MEDIUM 42

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01769 Published 2022-06-07 No fix listed CWE-77

TI-2019-07337 CVE-2019-9971 · GHSA-jmfj-wx65-4fr4

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows…

MEDIUM 42

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02128 Published 2022-06-07 No fix listed CWE-269

TI-2022-10466 CVE-2022-27438 · GHSA-5xhh-3gjf-pf84

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater…

LOW 39

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0211 Published 2022-06-06 No fix listed CWE-494

TI-2022-10842 CVE-2022-28005 · GHSA-m9wh-p6h4-rmvw

An issue was discovered in the 3CX Phone System Management Console prior to version 18…

MEDIUM 53

An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08346 Published 2022-05-06 No fix listed CWE-522

TI-2021-20578 CVE-2021-45491 · GHSA-hf72-j4p7-qjv2

3CX System through 2022-03-17 stores cleartext passwords in a database.

LOW 31

3CX System through 2022-03-17 stores cleartext passwords in a database.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0092 Published 2022-03-28 No fix listed CWE-312

TI-2021-20577 CVE-2021-45490 · GHSA-5vvh-22mv-pf93

The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application…

MEDIUM 41

The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate validation.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01087 Published 2022-03-28 No fix listed CWE-295

TI-2019-09333 CVE-2019-12498 · GHSA-6mgg-8wqh-hw3h

The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API…

MEDIUM 47

The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check protection mechanism.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02711 Published 2020-03-20 No fix listed CWE-862

TI-2014-08248 CVE-2014-10386 · GHSA-6mmm-qq9m-4q4w

The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.

LOW 29

The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00913 Published 2019-08-22 No fix listed CWE-74

TI-2017-13680 CVE-2017-18507 · GHSA-23v4-p97p-cxrg

The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.

LOW 29

The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00915 Published 2019-08-13 No fix listed CWE-79

TI-2019-11148 CVE-2019-14950 · GHSA-wrxf-339r-r7hx

The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.

LOW 30

The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01211 Published 2019-08-12 No fix listed CWE-79

TI-2017-13681 CVE-2017-18508 · GHSA-qhqm-r992-4fg3

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS.

LOW 29

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00933 Published 2019-08-12 No fix listed CWE-79

TI-2016-08917 CVE-2016-10879 · GHSA-xj35-wqmm-2cgp

The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS.

LOW 29

The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0093 Published 2019-08-12 No fix listed CWE-79

TI-2019-11134 CVE-2019-14935 · GHSA-hvpm-x4rm-4ch5

3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for…

LOW 34

3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for Windows\PhoneApp" installation directory, allowing Full Control access for Everyone, and leading to privilege escalation because of a St…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00393 Published 2019-08-11 No fix listed CWE-732

TI-2019-09872 CVE-2019-13176 · GHSA-59f8-2gf3-79q3

An issue was discovered in the 3CX Phone system (web) management console 12.5.44178.1002…

LOW 38

An issue was discovered in the 3CX Phone system (web) management console 12.5.44178.1002 through 12.5 SP2.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02461 Published 2019-08-08 No fix listed CWE-611

TI-2019-08369 CVE-2019-11185 · GHSA-wfph-5jh4-c99x

The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary…

MEDIUM 49

The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04349 Published 2019-06-03 No fix listed CWE-434

TI-2019-07285 CVE-2019-9913 · GHSA-j4h9-5mqx-7rp7

The wp-live-chat-support plugin before 8.0.18 for WordPress has…

LOW 30

The wp-live-chat-support plugin before 8.0.18 for WordPress has wp-admin/admin.php?page=wplivechat-menu-gdpr-page term XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01377 Published 2019-03-21 No fix listed CWE-79

TI-2018-13056 CVE-2018-18460 · GHSA-7pgp-wp79-7v7r

XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the…

LOW 29

XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the modules/gdpr.php term parameter in a wp-admin/admin.php wplivechat-menu-gdpr-page request.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01022 Published 2018-10-18 No fix listed CWE-79

TI-2018-10722 CVE-2018-14907 · GHSA-v2rp-vjv7-vgq4

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because…

LOW 26

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00961 Published 2018-08-03 No fix listed CWE-209

TI-2018-10721 CVE-2018-14906 · GHSA-cvcp-69pf-j53g

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters.

LOW 28

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00692 Published 2018-08-03 No fix listed CWE-79

TI-2018-10720 CVE-2018-14905 · GHSA-8xg6-v236-cg26

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter.

LOW 28

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00692 Published 2018-08-03 No fix listed CWE-79