Known Vulnerabilities for Axon Pbx by Nch
Listed below are 4 of the newest known vulnerabilities associated with "Axon Pbx" by "Nch".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-37441 json | NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring. | 8.8 - HIGH | 2021-07-25 | 2021-08-06 |
| CVE-2021-37440 json | NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring. | 6.5 - MEDIUM | 2021-07-25 | 2021-08-05 |
| CVE-2018-11552 json | There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability ex... | 6.1 - MEDIUM | 2018-06-01 | 2018-07-03 |
| CVE-2018-11551 json | AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrar... | 7.8 - HIGH | 2018-06-01 | 2018-07-03 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Nch | Axon Pbx | 2.02 |