Approved changes feed: RSS · Atom

cpe:2.3:a:sangoma:voicemail:*:*:*:*:*:freepbx:*:*

part: a version: * update: *

VendorSangoma (d67f1eae-5751-5e76-a443-3846a37ebaf1)
ProductVoicemail (9c1b980f-001e-5670-80e1-9857991e2515)
Edition*
Language*
Software edition*
Target softwarefreepbx
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4283 vulnerable 2026-06-03 14:45:48.371009 FreeBPX voicemail Settings ssettings.php cross site scripting
LOW (2.4)
A vulnerability was found in FreeBPX voicemail. It has been rated as problematic. Affected by this issue is some unknown functionality of the file views/ssettings.php of the component Settings Handler. The manipulation of the argument key leads to cross site scripting. The attack may be launched remotely. Upgrading to version 14.0.6.25 is able to address this issue. The name of the patch is ffce4882016076acd16fe0f676246905aa3cb2f3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216872.
Published: 2022-12-27T09:46:16.138Z
Updated: 2024-08-03T17:23:10.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4282 vulnerable 2026-06-03 14:45:48.369170 FreePBX voicemail page.voicemail.php cross site scripting
LOW (3.5)
A vulnerability was found in FreePBX voicemail. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file page.voicemail.php. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 14.0.6.25 is able to address this issue. The name of the patch is 12e1469ef9208eda9d8955206e78345949236ee6. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216871.
Published: 2022-12-27T09:44:07.835Z
Updated: 2024-08-03T17:23:09.871Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.