Vulnerabilities

TI-2026-70888 CVE-2026-108809 · GHSA-9x7g-m39f-5q48

Insufficient session expiration in Eleveo Call Recording Software

LOW 22

A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0018 Published 2026-10-12 No fix listed CWE-613

TI-2026-70887 CVE-2026-108808 · GHSA-ch2p-m97v-rvw7

Sensitive GET query strings in Eleveo Call Recording Software

MEDIUM 44

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0.

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00184 Published 2026-10-12 No fix listed CWE-598

TI-2026-65148 CVE-2026-101146 · GHSA-4grx-3wf3-3547

Eleveo Quality Management GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure

MEDIUM 57

A security flaw has been discovered in Eleveo Quality Management 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00274 Published 2026-09-28 No fix listed CWE-200

TI-2026-65147 CVE-2026-101145 · GHSA-43pm-6h6p-qxr3

Eleveo Call Recording Software User Management userAddAction.do ldap injection

MEDIUM 57

A vulnerability was identified in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00221 Published 2026-09-28 No fix listed CWE-74

TI-2026-65146 CVE-2026-101144 · GHSA-wwfr-44pg-7wr5

Eleveo Call Recording Software Query Builder searchAction.do access control

MEDIUM 57

A vulnerability was determined in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00201 Published 2026-09-28 No fix listed CWE-266

TI-2026-65145 CVE-2026-101143 · GHSA-wg44-852p-pwjv

Eleveo Quality Management QMBODownload information disclosure

MEDIUM 57

A vulnerability was found in Eleveo Quality Management 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00274 Published 2026-09-28 No fix listed CWE-200

TI-2026-65144 CVE-2026-101142 · GHSA-vhv2-j368-w4wv

Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal

MEDIUM 57

A vulnerability has been found in Eleveo Quality Management 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00339 Published 2026-09-28 No fix listed CWE-22

TI-2026-65143 CVE-2026-101141 · GHSA-44f9-hq28-4gf9

Eleveo Call Recording Software Play Audio audio.jsp cross site scripting

MEDIUM 56

A flaw has been found in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00191 Published 2026-09-28 No fix listed CWE-79

TI-2026-58616 CVE-2026-85409 · GHSA-j8r5-r6vr-vrvw

Eleveo Quality Management Questionnaire Service QuestionnaireService.runDataExportNow path traversal

MEDIUM 57

A vulnerability was identified in Eleveo Quality Management 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00494 Published 2026-09-04 No fix listed CWE-22

TI-2026-58615 CVE-2026-85408 · GHSA-h4f3-rj2v-c7hp

Eleveo Quality Management Conversation events dynamically-determined object attributes

MEDIUM 57

A vulnerability was determined in Eleveo Quality Management 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00397 Published 2026-09-04 No fix listed CWE-913

TI-2026-58614 CVE-2026-85407 · GHSA-7xhm-jqqf-fm39

Eleveo Quality Management Conversation events denial of service

MEDIUM 57

A vulnerability was found in Eleveo Quality Management 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00471 Published 2026-09-04 No fix listed CWE-404

TI-2026-58613 CVE-2026-85406 · GHSA-8rf9-9722-c35g

Eleveo Quality Management Conversation Review cross site scripting

MEDIUM 56

A vulnerability has been found in Eleveo Quality Management 9.7.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00331 Published 2026-09-04 No fix listed CWE-79

TI-2026-58612 CVE-2026-85405 · GHSA-q48j-cx99-wpm8

Eleveo Call Recording Software roleAddAction.do cross site scripting

MEDIUM 56

A flaw has been found in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00331 Published 2026-09-04 No fix listed CWE-79

TI-2026-13015 CVE-2026-15474 · GHSA-7vp6-798p-p545

Eleveo Call Recording Software audio.jsp improper authorization

MEDIUM 57

A security flaw has been discovered in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00348 Published 2026-07-12 No fix listed CWE-266

TI-2026-13014 CVE-2026-15473 · GHSA-g5qr-cxfc-7rp9

Eleveo Call Recording Software Recorded Calls restoreCallAction.do improper authorization

MEDIUM 57

A vulnerability was identified in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00347 Published 2026-07-12 No fix listed CWE-266

TI-2026-13013 CVE-2026-15472 · GHSA-jvw9-2m88-ppg9

Eleveo Call Recording Software composeEmailAction.do improper authorization

MEDIUM 57

A vulnerability was determined in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00348 Published 2026-07-12 No fix listed CWE-266

TI-2026-13012 CVE-2026-15471 · GHSA-q5mf-944j-vgq2

Eleveo Call Recording Software pci_dss_status.jsp improper authorization

MEDIUM 57

A vulnerability was found in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00348 Published 2026-07-12 No fix listed CWE-266

TI-2026-13011 CVE-2026-15470 · GHSA-qhq9-8cqg-qc8g

Eleveo Call Recording Software group.jsp improper authorization

MEDIUM 57

A vulnerability has been found in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00348 Published 2026-07-11 No fix listed CWE-266

TI-2026-12938 CVE-2026-15377 · GHSA-wr4j-hg4g-74fm

Eleveo Call Recording Software sendlogfile improper authorization

MEDIUM 57

A vulnerability was determined in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00348 Published 2026-07-10 No fix listed CWE-266

TI-2026-12937 CVE-2026-15376 · GHSA-x3wm-r2cm-wm5q

Eleveo Call Recording Software statisticReportAction.do improper authorization

MEDIUM 57

A vulnerability was found in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00347 Published 2026-07-10 No fix listed CWE-266

TI-2026-12936 CVE-2026-15375 · GHSA-c5gr-gm67-478c

Eleveo Call Recording Software LDAP User users_ldap.jsp improper authorization

MEDIUM 57

A vulnerability has been found in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00279 Published 2026-07-10 No fix listed CWE-266

TI-2026-12935 CVE-2026-15374 · GHSA-7c75-35mf-f3w9

Eleveo Call Recording Software Group roleAddAction.do improper authorization

MEDIUM 57

A flaw has been found in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00347 Published 2026-07-10 No fix listed CWE-266

TI-2026-12934 CVE-2026-15373 · GHSA-g4hc-6r3w-3xjp

Eleveo Call Recording Software userAddAction.do improper authorization

MEDIUM 57

A vulnerability was detected in Eleveo Call Recording Software 9.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00347 Published 2026-07-10 No fix listed CWE-266

TI-2019-14277 CVE-2019-19810 · GHSA-8p3v-4rh7-r554

Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks…

MEDIUM 51

Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.05102 Published 2021-10-28 No fix listed CWE-502

TI-2019-13242 CVE-2019-18223 · GHSA-mf86-6cg8-pmjc

ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS…

LOW 25

ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1) User Edit or (2) User Add form, (3) name field in the Role Add form, (4) name or…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00563 Published 2020-04-27 No fix listed CWE-79

Vulnerabilities

Filters