CVE-2024-52882

AudioCodes One Voice Operations Center (OVOC) versions prior to 8.4.582 are vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the improper neutralization of input via the devices API , which allows an attacker to inject malicious JavaScript code. This vulnerability can b...

CVE-2024-52881

AudioCodes One Voice Operations Center (OVOC) versions prior to 8.4.582 are vulnerable to a security issue caused by the use of a hard-coded cryptographic key . An attacker can exploit this flaw to decrypt sensitive data, specifically passwords extracted from the topology file . To remediate this...

CVE-2024-52883

AudioCodes One Voice Operations Center (OVOC) versions prior to 8.4.582 are susceptible to a path traversal vulnerability. This flaw allows an unauthenticated attacker to read sensitive data by manipulating file paths. To remediate this issue, users should update to version 8.4.582 or later. As a...