Business Edition

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-2264 Apr 01, 16:55 MEDIUM This Month

The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Asterisk Certified Asterisk Open Source Digiumphones +1

NVD

CVSS 2.0

5.0

EPSS

0.2%

CVE-2012-2186 Aug 31, 14:55 CRITICAL PATCH Act Now

Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Asterisk Certified Asterisk Open Source Digiumphones +2

NVD

CVSS 2.0

9.0

EPSS

0.5%

CVE-2013-2264

EPSS 0% CVSS 5.0

MEDIUM This Month

Information Disclosure Asterisk Certified Asterisk +3

NVD

CVE-2012-2186

EPSS 0% CVSS 9.0

CRITICAL PATCH Act Now

Information Disclosure Asterisk Certified Asterisk +4

NVD