Freepbx Vulnerabilità

Sequenza temporale

Versione

2.9	7
2.4	4
2.5.2	4
4.4.3	3
2.4.0	3

Contromisure

Official Fix	19
Temporary Fix	0
Workaround	0
Unavailable	1
Not Defined	20

Sfruttabilità

High	3
Functional	2
Proof-of-Concept	13
Unproven	0
Not Defined	22

Accesso al vettore

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	38

Autenticazione

Not Defined	0
High	8
Low	13
None	19

Interazione dell'utente

Not Defined	0
Required	21
None	19

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	7
≤5	3
≤6	7
≤7	8
≤8	6
≤9	7
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	7
≤5	3
≤6	11
≤7	8
≤8	8
≤9	3
≤10	0

VulDB

≤1	0
≤2	0
≤3	4
≤4	5
≤5	7
≤6	3
≤7	7
≤8	6
≤9	6
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	0
≤7	1
≤8	4
≤9	3
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	5
<2k	26
<5k	9
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	39
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (185): 2.1, 2.1.3, 2.2 Rc1, 2.2.1, 2.4, 2.4.0 Beta1, 2.4.0 Beta2, 2.4.1, 2.5, 2.5.0 Beta1, 2.5.0rc2, 2.5.0rc3, 2.5.1, 2.5.2, 2.6, 2.8, 2.9, 2.9.0.8, 2.10, 2.10.0.1, 2.10.0.2, 2.10.0.3, 2.10.0.4, 2.10.0.5, 2.10.0.6, 2.10.0.7, 2.10.0.8, 2.10.0.9, 2.11, 2.11.0.1, 2.11.0.2, 2.11.0.3, 2.11.0.4, 2.11.1, 2.11.1.1, 2.11.1.2, 2.11.1.3, 2.11.1.4, 2.12, 3.0.122, 3.0.122.1, 3.0.122.2, 3.0.122.3, 3.0.122.4, 3.0.122.5, 3.0.122.6, 3.0.122.7, 3.0.122.8, 3.0.122.9, 3.0.122.11, 3.0.122.12, 3.0.122.13, 3.0.122.14, 3.0.122.15, 3.0.122.16, 3.0.122.17, 3.0.122.18, 3.0.122.19, 3.0.122.21, 3.0.122.22, 3.0.122.23, 3.0.122.24, 3.0.122.25, 3.0.122.26, 3.0.122.27, 3.0.122.28, 3.0.122.29, 3.0.122.31, 3.0.122.32, 3.0.122.33, 3.0.122.34, 3.0.122.35, 3.0.122.36, 3.0.122.37, 3.0.122.38, 3.0.122.39, 3.0.122.41, 3.0.122.42, 4.0.18, 4.0.18.1, 4.0.18.2, 4.0.18.3, 4.0.18.4, 4.0.18.5, 4.0.18.6, 4.0.18.7, 4.0.18.8, 4.0.18.9, 4.0.18.11, 4.0.18.12, 4.0.18.13, 4.0.18.14, 4.0.18.15, 4.0.18.16, 4.0.18.17, 4.0.18.18, 4.0.18.19, 4.0.18.21, 4.0.18.22, 4.0.18.23, 4.0.18.24, 4.0.18.25, 4.0.18.26, 4.0.18.27, 4.0.18.28, 4.0.18.29, 4.0.18.31, 4.0.18.32, 4.0.18.33, 4.4.3, 5.0.1beta3, 10.13.66-32bit, 13.0, 13.0.197, 13.0.197.1, 13.0.197.2, 13.0.197.3, 13.0.197.4, 13.0.197.5, 13.0.197.6, 13.0.197.7, 13.0.197.8, 13.0.197.9, 13.0.197.11, 13.0.197.12, 13.0.197.13, 14.0, 14.0.13, 14.0.13.1, 14.0.13.2, 14.0.13.3, 14.0.13.4, 14.0.13.5, 14.0.13.6, 14.0.13.7, 14.0.13.8, 14.0.13.9, 14.0.13.11, 15, 15.0.1, 15.0.2, 15.0.3, 15.0.4, 15.0.5, 15.0.6, 15.0.7, 15.0.8, 15.0.9, 15.0.11, 15.0.12, 15.0.13, 15.0.14, 15.0.15, 15.0.16, 15.0.16.1, 15.0.16.2, 15.0.16.3, 15.0.16.4, 15.0.16.5, 15.0.16.6, 15.0.16.7, 15.0.16.8, 15.0.16.9, 15.0.16.11, 15.0.16.12, 15.0.16.13, 15.0.16.14, 15.0.16.15, 15.0.16.16, 15.0.16.17, 15.0.16.18, 15.0.16.19, 15.0.16.21, 15.0.16.22, 15.0.16.23, 15.0.16.24, 15.0.16.25, 15.0.16.26, 15.0.17, 15.0.18, 15.0.19, 15.0.19.1, 15.0.19.2, 2203, 2302

Data di pubblicazione	Base	Temp	Vulnerabilità	0day	Oggi	Sfr	Con	CTI	CVE
10/05/2024	7.3	7.3	Sangoma FreePBX REST Interface autenticazione debole	$0-$5k	$0-$5k	Not Defined	Not Defined	0.08	CVE-2023-26566
02/11/2023	7.1	7.0	Sangoma FreePBX escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-43336
27/04/2023	5.8	5.8	Sangoma FreePBX Asterisk Manager Interface variable rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-26567
22/12/2021	6.3	5.9	FreePBX restapps Privilege Escalation	$0-$5k	$0-$5k	Functional	Official Fix	0.00	CVE-2021-45461
31/05/2021	6.3	6.3	Sangoma FreePBX/PBXact restapps Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-10666
16/03/2020	3.6	3.6	Sangoma FreePBX/PBXact Call Event Logger cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-19852
16/03/2020	3.6	3.6	Sangoma FreePBX/PBXact Superfecta Module cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2019-19851
16/03/2020	5.9	5.9	Sangoma FreePBX/sysadmin escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-19538
06/12/2019	3.6	3.6	Sangoma FreePBX Userman cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-19552
06/12/2019	3.6	3.6	Sangoma FreePBX Userman cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-19551

30 non vengono visualizzate più voci

🔒 Login Required

You need to signup and login to see more of the remaining 30 results.

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Interested in the pricing of exploits?

See the underground prices here!