Vendor

    3CX

    34 known vulnerabilities in products by 3CX, 0 of them actively exploited (CISA KEV).

    Key figures

    34

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in 3CX
    CriticalCVE-2022-28005

    3CX: Path Traversal

    		9.8
    CriticalCVE-2018-12426

    3CX Live Chat: Remote Code Execution

    		9.8
    CriticalCVE-2019-11185

    3CX Live Chat: Unrestricted File Upload

    		9.8
    HighCVE-2023-29059

    3CX: security vulnerability

    		7.8
    CriticalCVE-2023-49954

    3CX: SQL Injection

    		9.8
    MediumCVE-2017-15359

    3CX: Path Traversal

    		6.5
    CriticalCVE-2019-12498

    3CX Live Chat: security vulnerability

    		9.8
    HighCVE-2019-9971

    3CX Phone System Firmware: Privilege Escalation

    also in 1 other product

    		8.8
    HighCVE-2022-27438

    Caphyon Advanced Installer: Remote Code Execution

    also in 4 other products

    		8.1
    HighCVE-2019-13176

    3CX: XML External Entity (XXE)

    		7.5
    HighCVE-2022-48482

    3CX: Path Traversal

    		7.5
    HighCVE-2019-9972

    3CX Phone System Firmware: security vulnerability

    also in 1 other product

    		8.8
    HighCVE-2022-48483

    3CX: Path Traversal

    		7.5
    MediumCVE-2018-7654

    3CX: Path Traversal

    		6.5
    CriticalCVE-2021-45490

    3CX: security vulnerability

    		9.1
    MediumCVE-2019-9913

    3CX Live Chat: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2018-9864

    3CX Live Chat: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2017-2187

    CODECABIN_ WP Live Chat Support: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2019-14950

    3CX Live Chat: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2018-11105

    3CX Live Chat: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2018-18460

    3CX Live Chat: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2021-45491

    3CX: security vulnerability

    		6.5
    MediumCVE-2017-18508

    3CX Live Chat: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2016-10879

    3CX Live Chat: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2017-18507

    3CX Live Chat: Cross-Site Scripting (XSS)

    		6.1

    All vulnerabilities in search

    Products

    Products by 3CX
    CODECABIN_ WP Live Chat Support130
    3CX120
    3CX Web Server30
    Phone System30