Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/12/25 3:9 p.m.9 views

CVE-2025-2155

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion.This issue affects Specto CM: before 17032025...

8.8CVSS7.3AI score0.00288EPSS
Exploits0References1
NVD
NVD
added 2025/12/24 3:16 p.m.6 views

CVE-2025-2155

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion. This issue affects Specto CM: before 17032025...

8.8CVSS0.00288EPSS
Exploits0References2
NVD
NVD
added 2025/12/24 3:16 p.m.6 views

CVE-2025-2154

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Stored XSS. This issue affects Specto CM: before 17032025...

5.4CVSS0.00138EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/24 2:31 p.m.32 views

CVE-2025-2155 Arbitrary File Upload in EchoCCS's Specto CM

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion. This issue affects Specto CM: before 17032025...

8.8CVSS0.00288EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/24 2:31 p.m.3 views

EUVD-2025-205285

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion.This issue affects Specto CM: before 17032025...

8.8CVSS6.8AI score0.00288EPSS
Exploits0References2
CVE
CVE
added 2025/12/24 2:31 p.m.21 views

CVE-2025-2155

CVE-2025-2155 affects Specto CM (Echo Call Center Services Trade and Industry Inc.). The vulnerability is an Unrestricted Upload of File with Dangerous Type, enabling Remote Code Inclusion. Affected versions are before 17032025. Root cause: improper file‑type validation allowing executable conten...

8.8CVSS5.6AI score0.00288EPSS
Exploits0References2
CVE
CVE
added 2025/12/24 2:26 p.m.12 views

CVE-2025-2154

CVE-2025-2154 is a Stored XSS vulnerability affecting Specto CM (Echo Specto Call Center Management) prior to version 17032025, caused by improper input neutralization during web page generation. The issue is documented across multiple sources (NVD, Red Hat, CVE listing) as a stored XSS in Specto...

5.4CVSS5.4AI score0.00138EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/24 2:26 p.m.4 views

CVE-2025-2154 Stored XSS in EchoCCS's Specto CM

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Stored XSS. This issue affects Specto CM: before 17032025...

5.4CVSS5.4AI score0.00138EPSS
Exploits0References2
Rows per page
Query Builder