Approved changes feed: RSS · Atom
cpe:2.3:a:vicidial:vicidial:2.14-917a:*:*:*:*:*:*:*part: a version: 2.14-917a update: *
| Vendor | Vicidial (c4160c4c-0490-584f-8783-cdaf2bbf9a85) |
|---|---|
| Product | Vicidial (71471dec-103d-5766-b635-b4e1b640a8f5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8504 |
vulnerable | 2026-06-08 07:00:24.802728 |
VICIdial Authenticated Remote Code Execution
An attacker with authenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "root" user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective.
Published: 2024-09-10T19:23:39.327Z
Updated: 2025-11-04T16:16:06.940Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8503 |
vulnerable | 2026-06-08 07:00:24.801352 |
VICIdial Unauthenticated SQL Injection
An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database.
Published: 2024-09-10T19:22:40.111Z
Updated: 2025-11-04T16:16:05.997Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.