📦 Cloud Phone System

by Pascom

🔍 What is Cloud Phone System?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2021-45966

CRITICAL CVSS 9.8 Mar 18, 2022

This vulnerability allows remote attackers to execute arbitrary code on Pascom Cloud Phone System servers by sending shell metacharacters to the /services/apply endpoint in the management REST API. It...

CVE-2021-45968

HIGH CVSS 7.5 Mar 18, 2022

This vulnerability allows Server-Side Request Forgery (SSRF) attacks against the XMPP Server component in Pascom Cloud Phone System and other JIve platform products. Attackers can make the vulnerable ...