Vulnerabilities

TI-2025-33350 CVE-2025-53399 · GHSA-9m93-62q8-9jmx

Origin validation error in Sipwise rtpengine

MEDIUM 64

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets (except when t…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0717 Published 2025-08-01 Fixed in 13.4.1.1 CWE-346

TI-2024-18845 CVE-2024-28345 · GHSA-hjx9-vcv6-76j4

An issue discovered in Sipwise C5 NGCP Dashboard below mr11.5.1 allows a low privileged…

LOW 25

An issue discovered in Sipwise C5 NGCP Dashboard below mr11.5.1 allows a low privileged user to access the Journal endpoint by directly visit the URL.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.0042 Published 2024-04-10 No fix listed

TI-2024-18844 CVE-2024-28344 · GHSA-r43r-4m97-hpp9

An Open Redirect vulnerability was found in Sipwise C5 NGCP Dashboard below mr11.5.1.

MEDIUM 48

An Open Redirect vulnerability was found in Sipwise C5 NGCP Dashboard below mr11.5.1.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00463 Published 2024-04-10 No fix listed CWE-601

TI-2021-11692 CVE-2021-31584 · GHSA-xx64-c8ff-p925

Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8.13…

MEDIUM 40

Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8.13 allows call/click2dial CSRF attacks for actions with administrative privileges.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00926 Published 2021-04-23 No fix listed CWE-352

TI-2021-11691 CVE-2021-31583 · GHSA-3jj3-875w-p3wj

Sipwise C5 NGCP WWW Admin version 3.6.7 up to and including platform version NGCP CE 3.0…

LOW 27

Sipwise C5 NGCP WWW Admin version 3.6.7 up to and including platform version NGCP CE 3.0 has multiple authenticated stored and reflected XSS vulnerabilities when input passed via several parameters to several scripts is…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01123 Published 2021-04-23 No fix listed CWE-79

Vulnerabilities

Filters

Origin validation error in Sipwise rtpengine

An issue discovered in Sipwise C5 NGCP Dashboard below mr11.5.1 allows a low privileged…

An Open Redirect vulnerability was found in Sipwise C5 NGCP Dashboard below mr11.5.1.

Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8.13…

Sipwise C5 NGCP WWW Admin version 3.6.7 up to and including platform version NGCP CE 3.0…