Products: 1
Vulnerabilities: 52
Known Exploited: 0
2
Critical Level Threats
11
High Level Threats
39
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2024-24539
FusionPBX before 5.2.0 does not validate a session.
Last Modified: May 23, 2025
Published: Mar 18, 2024
CVE-2024-23387
FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attacker with an administrative privilege, an arbitrary script may be executed on the web browser of the user who is logging in to the product.
Last Modified: May 30, 2025
Published: Jan 19, 2024
CVE-2022-35153
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.
Last Modified: Nov 21, 2024
Published: Aug 18, 2022
CVE-2021-37524
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php.
Last Modified: Nov 21, 2024
Published: Jul 01, 2022
CVE-2022-28055
Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function.
Last Modified: Nov 21, 2024
Published: May 04, 2022
Items Per Page
