Next Generation Communication Platform Security Vulnerabilities and Issues — Next Generation Communication Platform CVE List

Lucene search

SipwiseNext Generation Communication Platform

4 matches found

CVE•added 2021/04/23 9:15 p.m.•48 views

CVE-2021-31584

Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8.13 allows call/click2dial CSRF attacks for actions with administrative privileges.

8.8CVSS8.7AI score0.00203EPSS

CVE•added 2021/04/23 9:15 p.m.•41 views

CVE-2021-31583

Sipwise C5 NGCP WWW Admin version 3.6.7 up to and including platform version NGCP CE 3.0 has multiple authenticated stored and reflected XSS vulnerabilities when input passed via several parameters to several scripts is not properly sanitized before being returned to the user: Stored XSS in callfor...

5.4CVSS5.3AI score0.00303EPSS

CVE•added 2024/04/10 7:15 p.m.•35 views

CVE-2024-28345

An issue discovered in Sipwise C5 NGCP Dashboard below mr11.5.1 allows a low privileged user to access the Journal endpoint by directly visit the URL.

5.5CVSS6.6AI score0.0007EPSS

CVE•added 2024/04/10 7:15 p.m.•34 views

CVE-2024-28344

An Open Redirect vulnerability was found in Sipwise C5 NGCP Dashboard below mr11.5.1. The Open Redirect vulnerability allows attackers to control the "back" parameter in the URL through a double encoded URL.

3.1CVSS6.7AI score0.00047EPSS