Export limit exceeded: 425863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-30006

Xorcom CompletePBX <= 5.2.35 Reflected Cross-Site Scripting

Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel. This issue affects CompletePBX: all versions up to and including 5.2.35

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Xorcom
Products
Completepbx
CVE-2025-30005

Xorcom CompletePBX <= 5.2.35 Authenticated Path Traversal & File Deletion

Xorcom CompletePBX is vulnerable to a path traversal via the Diagnostics reporting module, which will allow reading of arbitrary files and additionally delete any retrieved file in place of the expected report. This issue affects CompletePBX: all versions up to and prior to 5.2.35

CVSS 3.1 · 8.3 High EPSS 1.9% KEV · Not listed
Vendors
Xorcom
Products
Completepbx
CVE-2025-30004

Xorcom CompletePBX <= 5.2.35 Task Scheduler Authenticated Command Injection

Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. This issue affects CompletePBX: all versions up to and prior to 5.2.35

CVSS 3.1 · 8.8 High EPSS 4.3% KEV · Not listed
Vendors
Xorcom
Products
Completepbx
CVE-2025-2292

Xorcom CompletePBX <= 5.2.35 Authenticated File Disclosure

Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrary file reads via the Backup and Restore functionality.This issue affects CompletePBX: through 5.2.35.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Xorcom
Products
Completepbx