Vulnerabilities

TI-2024-16251 CVE-2024-24720 · GHSA-8cpv-pp42-ppmr

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1…

LOW 30

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0047 Published 2024-02-27 No fix listed CWE-200

TI-2024-16252 CVE-2024-24721 · GHSA-f78h-hr6r-68jw

An issue was discovered on Innovaphone PBX before 14r1 devices.

LOW 31

An issue was discovered on Innovaphone PBX before 14r1 devices.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00307 Published 2024-02-26 No fix listed CWE-307

TI-2022-20212 CVE-2022-41870 · GHSA-fm63-pfg2-7jrw

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a…

LOW 36

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0132 Published 2022-09-30 No fix listed CWE-77

TI-2014-04351 CVE-2014-5335 · GHSA-j47q-mm35-5p3h

Multiple cross-site request forgery (CSRF) vulnerabilities in innovaphone PBX 10.00 sr11…

LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in innovaphone PBX 10.00 sr11 and earlier allow remote attackers to hijack the authentication of administrators for requests that modify configurations or user a…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01224 Published 2014-08-25 No fix listed CWE-352

Vulnerabilities

Filters

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1…

An issue was discovered on Innovaphone PBX before 14r1 devices.

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a…

Multiple cross-site request forgery (CSRF) vulnerabilities in innovaphone PBX 10.00 sr11…