Skip to content
Zenitel vulnerabilities
Newest
-
zenitel alphacom xe audio server
Authenticated Arbitrary File Read via filepath parameter
CVE-2025-59819
6.5 Medium
-
zenitel tcis-3+, tcis-3 firmware +1 more
Authenticated Remote Code Execution via the file name of an uploaded file
CVE-2025-59818
10.0 Critical
-
zenitel icx500, icx500 firmware, icx510 +1 more +3 more
Unauthenticated Remote Code Execution via the device hostname
CVE-2025-64093
10.0 Critical
-
zenitel icx500, icx500 firmware, icx510 +1 more +3 more
Unauthenticated SQL injection via GET request parameters
CVE-2025-64092
7.5 High
-
zenitel tcis-3+, tcis-3 firmware +1 more
Authenticated Remote Code Execution in the NTP-configuration
CVE-2025-64091
8.6 High
-
zenitel tcis-3+, tcis-3 firmware +1 more
Authenticated Remote Code Execution in device hostname
CVE-2025-64090
10.0 Critical
-
zenitel tciv-3+
Zenitel TCIV-3+ Cross-site Scripting
CVE-2025-64130
9.3 Critical
-
zenitel tciv-3+
Zenitel TCIV-3+ Out-of-bounds Write
CVE-2025-64129
7.0 High
-
zenitel tciv-3+
Zenitel TCIV-3+ OS Command Injection
CVE-2025-64128
10.0 Critical
-
zenitel tciv-3+
Zenitel TCIV-3+ OS Command Injection
CVE-2025-64127
10.0 Critical
-
zenitel tciv-3+
Zenitel TCIV-3+ OS Command Injection
CVE-2025-64126
10.0 Critical
-
zenitel tcis-3+
Authenticated Remote Code Execution in zForm_auto_config
CVE-2025-59817
8.4 High
-
zenitel icx500, icx510 +1 more
Authenticated Union based SQL-injection in the search input field
CVE-2025-59816
7.3 High
-
zenitel icx500, icx510 +1 more
Authenticated Remote Code Execution in the Billing Administration portal
CVE-2025-59815
8.4 High
-
zenitel icx500, icx510 +1 more
Unauthenticated SQL-injection in password field
CVE-2025-59814
8.8 High
-
zenitel alphacom xe audio server
The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not...
CVE-2021-40845
Public exploit
8.8 High
-
zenitel ip-stationweb firmware
Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station...
CVE-2018-19927
4.8 Medium
-
zenitel ip-stationweb firmware
Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH_INFO.
CVE-2018-19926
6.1 Medium