Approved changes feed: RSS · Atom

cpe:2.3:a:yealink:sip-t21p_e2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYealink (bb00dccf-901c-54fe-84ea-6136ece47bd5)
ProductSip T21P E2 (a7204f7c-13ed-573f-9e02-f9f56eefd7f8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14228 vulnerable 2026-06-03 14:58:54.833519 Yealink SIP-T21P E2 Local Directory cross site scripting
LOW (3.5)
A weakness has been identified in Yealink SIP-T21P E2 52.84.0.15. Impacted is an unknown function of the component Local Directory Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-12-08T10:32:06.266Z
Updated: 2025-12-08T17:16:09.170Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.