Powermedia Xms Security Vulnerabilities and Issues — Powermedia Xms CVE List

Lucene search

DialogicPowermedia Xms

4 matches found

CVE•added 2018/07/03 5:29 p.m.•42 views

CVE-2018-11640

XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service (resource consumption).

9.1CVSS8.9AI score0.00667EPSS

CVE•added 2018/07/03 5:29 p.m.•39 views

CVE-2018-11635

Use of a Hard-coded Cryptographic Key used to protect cookie session data in /var/www/xms/application/config/config.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to bypass authentication.

9.8CVSS9.3AI score0.01104EPSS

CVE•added 2018/07/03 5:29 p.m.•36 views

CVE-2018-11638

Unrestricted Upload of a File with a Dangerous Type in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to upload malicious code to the web root to gain code execution.

9CVSS7.2AI score0.02384EPSS

CVE•added 2018/07/03 5:29 p.m.•33 views

CVE-2018-11641

Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to interact with a web service.

9.8CVSS9.3AI score0.00783EPSS