Skip to contentSangoma vulnerabilities
Newest
- asterisk, sangoma certified asterisk +1 moreAsterisk susceptible to Denial of Service via DTLS Hello packets during call initiationCVE-2023-49786Fix available7.5 High
- asterisk, sangoma certified asterisk +1 moreAsterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'CVE-2023-37457Fix available7.5 High
- asterisk, sangoma certified asterisk +1 moreAsterisk Path Traversal vulnerabilityCVE-2023-49294Fix availableEPSS 45.3%4.9 Medium
- sangoma freepbxSangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to...CVE-2023-433368.8 High
- sangoma freepbx linux 7Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS,...CVE-2023-265678.1 High
- freepbx arimanager, sangoma freepbx +1 moreFreePBX arimanager Views cross site scriptingCVE-2019-250903.5 Low
- freebpx voicemailFreeBPX voicemail Settings ssettings.php cross site scriptingCVE-2021-42832.4 Low
- freebpx voicemailFreePBX voicemail page.voicemail.php cross site scriptingCVE-2021-42823.5 Low
- freepbx cdr, sangoma freepbx +1 moreFreePBX cdr Cdr.class.php ajaxHandler sql injectionCVE-2020-366305.5 Medium
- sangoma asterisk, certified asterisk +1 moreAn issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19...CVE-2022-42706Fix available4.9 Medium
- sangoma asterisk, certified asterisk +1 moreA use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9...CVE-2022-42705Fix available6.5 Medium
- sangoma asteriskIn Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an...CVE-2022-37325Fix available7.5 High
- teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 moreUse after free in PJSIPCVE-2022-23608Fix available8.1 High
- sangoma switchvoxSangoma Technologies Corporation Switchvox Version 102409 is affected by an information...CVE-2021-453105.3 Medium
- teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 moreOut-of-bounds read in multipart parsing in PJSIPCVE-2022-21723Fix available9.1 Critical
- sangoma restappsFreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is...CVE-2021-45461EPSS 21.5%9.8 Critical
- teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 morePotential integer underflow upon receiving STUN message in PJSIPCVE-2021-37706Fix available7.3 High
- sangoma restappsThe restapps (aka Rest Phone apps) module for Sangoma FreePBX and PBXact 13, 14, and 15 through...CVE-2020-106669.8 Critical
- digium certified asterisk, sangoma asterisk +1 moreA res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before...CVE-2020-28327Fix available5.3 Medium
- asterisk certified asterisk, sangoma asterisk, debian linux +1 more +3 moreAn issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x...CVE-2020-28242Fix available6.5 Medium
- sangoma freepbxAn XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the...CVE-2019-198524.8 Medium
- sangoma freepbxMultiple XSS vulnerabilities exist in the Backup & Restore module \ v14.0.10.2 through v14.0.10.7...CVE-2019-196154.8 Medium
- sangoma freepbxIn Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through 15.0.13.6...CVE-2019-195387.2 High
- sangoma freepbxAn XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the...CVE-2019-198514.8 Medium
- sangoma freepbxIn userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the User Management...CVE-2019-195514.8 Medium
- sangoma freepbxIn userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the user management...CVE-2019-195524.8 Medium
- sangoma freepbxSangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect...CVE-2019-19006In KEVEPSS 54.9%9.8 Critical
- asterisk, debian linux +1 moreasterisk allows calls on prohibited networksCVE-2009-3723Fix available7.5 High
- sangoma session border controller firmwareThe Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument...CVE-2019-121479.8 Critical
- sangoma session border controller firmwareThe Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an...CVE-2019-121489.8 Critical
- freepbx manager, sangoma freepbx +1 moreAn issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14...CVE-2019-169676.1 Medium
- freepbx contactmanager, sangoma freepbx +1 moreAn issue was discovered in Contactmanager 13.x before 13.0.45.3, 14.x before 14.0.5.12, and 15.x...CVE-2019-169666.1 Medium
- freepbxAn issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By...CVE-2018-158914.8 Medium
- sangoma asteriskAn issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk...CVE-2018-122286.5 Medium
- sangoma freepbx** DISPUTED ** FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2) allow post...CVE-2018-6393Disputed7.2 High
- sangoma netborder\/vega session firmwareSangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote attackers to...CVE-2017-174309.8 Critical
- asterisk certified asterisk, sangoma asterisk +1 moreA memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x...CVE-2017-9358Fix available7.5 High
- freepbxhtdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in...CVE-2014-7235Public exploitEPSS 43.9%10.0 High
- freepbxadmin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11...CVE-2014-1903Public exploitEPSS 51.8%7.5 High
- sangoma freepbxMultiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote...CVE-2012-4870Public exploit4.3 Medium
- sangoma freepbxThe callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and...CVE-2012-4869Public exploitEPSS 70.3%7.5 High
- asterisk business edition, certified asterisk, digiumphones +2 more +4 moreIncomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15...CVE-2012-2186Fix available9.0 High
- asterisk certified asterisk, open source, sangoma asterisk +2 morechan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1...CVE-2012-2948Fix available4.0 Medium
- sangoma freepbxDirectory traversal vulnerability in page.recordings.php in the System Recordings component in...CVE-2010-3490Public exploit6.5 Medium
- asterisk, asterisk open source, appliance s800i +1 more +3 moreThe IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26...CVE-2009-2346Fix available7.8 High
- freepbxFreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error...CVE-2009-18035.0 Medium
- freepbxMultiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5...CVE-2009-18026.8 Medium
- freepbxMultiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and...CVE-2009-18014.3 Medium
- sangoma wanpipeMultiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related...CVE-2008-659810.0 High