Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Xorcom Clear all filters
TI-2025-21380 CVE-2025-30005 · GHSA-4wxw-w756-wvc6

Xorcom CompletePBX <= 5.2.35 Authenticated Path Traversal & File Deletion

Priority MEDIUM 42

Xorcom CompletePBX is vulnerable to a path traversal via the Diagnostics reporting module, which will allow reading of arbitrary files and additionally delete any retrieved file in place of the expected report.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.01882 Published 2025-03-31 No fix listed CWE-22
TI-2025-21379 CVE-2025-30004 · GHSA-43h8-fqwq-8xx5

Xorcom CompletePBX <= 5.2.35 Task Scheduler Authenticated Command Injection

Priority MEDIUM 47

Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04309 Published 2025-03-31 No fix listed CWE-78
TI-2025-02012 CVE-2025-2292 · GHSA-6vhp-2xhp-9h5r

Xorcom CompletePBX <= 5.2.35 Authenticated File Disclosure

Priority LOW 32

Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrary file reads via the Backup and Restore functionality.This issue affects CompletePBX: through 5.2.35.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01785 Published 2025-03-31 No fix listed CWE-22