Vulnerabilities (CVE)

Filtered by vendor Audiocodes Subscribe
Filtered by product 405hd Firmware
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-16220 1 Audiocodes 2 405hd, 405hd Firmware 2019-04-26 4.3 MEDIUM 6.1 MEDIUM
Cross Site Scripting in different input fields (domain field and personal settings) in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an attacker (local or remote) to inject JavaScript into the web interface of the device by manipulating the phone book entries or manipulating the domain name sent to the device from the domain controller.