Search vulnerabilities

Results 2

Export CSV
CVE-2019-11880

CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2017-1000496

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code.

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Products