Filtered by vendor Splicecom Subscriptions
Filtered by product Maximiser Soft Pbx Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-33760 1 Splicecom 1 Maximiser Soft Pbx 2024-11-21 5.3 Medium
SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on communications via a man-in-the-middle attack.
CVE-2023-33759 1 Splicecom 1 Maximiser Soft Pbx 2024-11-21 9.8 Critical
SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force attack.
CVE-2023-33758 1 Splicecom 1 Maximiser Soft Pbx 2024-11-21 6.1 Medium
Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT_NAME and DEVICE_GUID fields in the login component.