Approved changes feed: RSS · Atom

cpe:2.3:h:yealink:ip_phone_sip-t28p:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorYealink (bb00dccf-901c-54fe-84ea-6136ece47bd5)
ProductIp Phone Sip T28P (6f66b459-b956-512c-abb2-46075f7f0cc0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1417 vulnerable 2026-06-08 05:00:48.777105 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated users to inject arbitrary web script or HTML via the user field to cgi-bin/ConfigManApp.com.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T18:53:37.452Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.