Business Edition

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-2264 MEDIUM This Month

The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Open Source Certified Asterisk Business Edition Digiumphones

NVD

CVSS 2.0

5.0

EPSS

0.2%

CVE-2012-2186 CRITICAL PATCH Act Now

Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Open Source Asterisk Certified Asterisk Digiumphones +1

NVD

CVSS 2.0

9.0

EPSS

0.5%

CVE-2013-2264

EPSS 0% CVSS 5.0

MEDIUM This Month

Information Disclosure Open Source Certified Asterisk +2

NVD

CVE-2012-2186

EPSS 0% CVSS 9.0

CRITICAL PATCH Act Now

Information Disclosure Open Source Asterisk +3

NVD