Known vulnerabilities in 3CX Phone System

Vendor: 3CX
Software: 3CX Phone System
Software CPE: cpe:2.3:h:3cx:3cx_phone_system:*:*:*:*:*:*:*:*
Website: https://www.3cx.com
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting 3CX Phone System 3CX Phone System is affected by 1 known vulnerabilities: 1 medium Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84509 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-49954		 CWE-89 Medium
No
No
 18.0.9.23, 20.0.0.1494 18.12.2023 SB2023121827