Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

VICIdial vulnerabilities

6 published CVEs name VICIdial among the affected products.

All 6 in the listAtom feed of new CVEs
Published CVEs
6
Last 12 months
0
Critical
1
Known exploited
0

Critical 1High 1Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20224
  2. 20242

Newest CVEs

  • CVE-2024-8504

    VICIdial Authenticated Remote Code Execution

    VICIdial · VICIdial

    High8.8
  • CVE-2024-8503

    VICIdial Unauthenticated SQL Injection

    VICIdial · VICIdial

    Critical9.8
  • CVE-2022-34879

    VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple Cross Site Scripting (XSS) vulnerabilities at /vicidial/admin.php.

    VICIdial · VICIdial

    Medium6.5
  • CVE-2022-34878

    VICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php.

    VICIdial · VICIdial

    Medium5.5
  • CVE-2022-34877

    VICIDial 2.14b0.5 SVN 3550 was discovered to contains a SQL injection vulnerability at /vicidial/AST_agent_time_sheet.php.

    VICIdial · VICIdial

    Medium6.4
  • CVE-2022-34876

    VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php.

    VICIdial · VICIdial

    Medium5.5

Products with the most CVEs

  1. VICIdial6

Most common weaknesses

  1. CWE-89 SQL injection4
  2. CWE-78 OS command injection1
  3. CWE-79 Cross-site scripting (XSS)1