Known vulnerabilities in Cisco 8800 Series IP Phones

Vendor: Cisco Systems, Inc

Software: Cisco 8800 Series IP Phones

Software CPE: cpe:2.3:h:cisco_systems:cisco_8800_series_ip_phones:*:*:*:*:*:*:*:*

Website: https://www.cisco.com

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU29143 - Exposure of sensitive information to an unauthorized actor CVE-2020-3360	CWE-200	Medium	No	No	-	18.06.2020	SB2020061814
#VU24160 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-16008	CWE-79	Low	No	No	11.3.1	09.01.2020	SB2020010911
#VU17842 - Improper input validation CVE-2019-1684	CWE-20	Low	No	No	12.1.1 SR2.1, 12.5.1 ES1, 12.5.1 SR2, 12.6.1 MN80	22.02.2019	SB2019022208
#VU16932 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-0461	CWE-79	Low	No	No	12.5.1 MN515	09.01.2019	SB2019011014
#VU13859 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2018-0341	CWE-78	High	No	No	-	11.07.2018	SB2018071308
#VU13227 - Improper input validation CVE-2018-0332	CWE-20	Low	No	No	-	07.06.2018	SB2018060718
#VU13225 - Error Handling CVE-2018-0316	CWE-388	Low	No	No	11.1.2	06.06.2018	SB2018060717
#VU317 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2016-1476	CWE-79	Low	No	No	-	15.08.2016	SB2016081505