GCVE - cpe:2.3:a:nchsoftware:axon_pbx:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nchsoftware:axon_pbx:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nchsoftware (`2fa18c30-743e-5430-8678-f6c6515c7625`)
Product	Axon Pbx (`5c0d8de9-89b0-545c-b73e-7ed01819ef4d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-37462`	vulnerable	2026-06-08 05:32:54.278388	Details available Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected). Published: 2021-07-25T20:10:02.000Z Updated: 2024-08-04T01:16:04.087Z Open on db.gcve.eu Reference links https://www.nch.com.au/pbx/index.html https://github.com/0xfml/poc/blob/main/NCH/Axon_2.22_XSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-37461`	vulnerable	2026-06-08 05:32:54.278134	Details available Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected). Published: 2021-07-25T20:10:12.000Z Updated: 2024-08-04T01:16:04.087Z Open on db.gcve.eu Reference links https://www.nch.com.au/pbx/index.html https://github.com/0xfml/poc/blob/main/NCH/Axon_2.22_XSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-37460`	vulnerable	2026-06-08 05:32:54.277873	Details available Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected). Published: 2021-07-25T20:10:22.000Z Updated: 2024-08-04T01:16:04.044Z Open on db.gcve.eu Reference links https://www.nch.com.au/pbx/index.html https://github.com/0xfml/poc/blob/main/NCH/Axon_2.22_XSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-37459`	vulnerable	2026-06-08 05:32:54.277517	Details available Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored). Published: 2021-07-25T20:10:33.000Z Updated: 2024-08-04T01:16:04.038Z Open on db.gcve.eu Reference links https://www.nch.com.au/pbx/index.html https://github.com/0xfml/poc/blob/main/NCH/Axon_2.22_XSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-37458`	vulnerable	2026-06-08 05:32:54.277021	Details available Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored). Published: 2021-07-25T20:10:44.000Z Updated: 2024-08-04T01:16:04.045Z Open on db.gcve.eu Reference links https://www.nch.com.au/pbx/index.html https://github.com/0xfml/poc/blob/main/NCH/Axon_2.22_XSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-37457`	vulnerable	2026-06-08 05:32:54.276743	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-37456`	vulnerable	2026-06-08 05:32:54.276466	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-37455`	vulnerable	2026-06-08 05:32:54.276063	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-37454`	vulnerable	2026-06-08 05:32:54.275744	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-37453`	vulnerable	2026-06-08 05:32:54.275262	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.