How many CVEs does 3cx 3cx have?

3cx 3cx has 12 published CVE records since 2017.

How many 3cx 3cx CVEs are in CISA KEV?

None of 3cx 3cx's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for 3cx 3cx vulnerabilities?

Yes — 5 of 3cx 3cx's CVEs have a known public exploit.

Which versions of 3cx 3cx are affected?

24 distinct 3cx 3cx versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in 3cx 3cx CVEs?

3cx 3cx's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-427 (Uncontrolled Search Path Element), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How many critical 3cx 3cx vulnerabilities are there?

3cx 3cx has 3 critical and 6 high-severity CVEs.

What is the average severity of 3cx 3cx CVEs?

The average CVSS base score across 3cx 3cx's scored CVEs is 7.8.

3cx Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every 3cx version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 2022-03-172 CVEs
< 18.0.2.3151 CVE
< 18.0.3.4611 CVE
< 18.0.9.231 CVE
<= 18.0.111 CVE
<= 18.0.3.4501 CVE
<= 18.0.41 CVE
>= 181 CVE
12.5 <= v <= 12.51 CVE
12.5.44178.1002 <= v <= 12.5.44178.10021 CVE
15 <= v <= 151 CVE
15.5.3554.1 <= v <= 15.5.3554.11 CVE
15.5.6354.2 <= v <= 15.5.6354.21 CVE
18.0.0.451 <= v < 18.0.8.9171 CVE
18.11.1213 <= v <= 18.11.12131 CVE
18.12.402 <= v <= 18.12.4021 CVE
18.12.407 <= v <= 18.12.4071 CVE
18.12.416 <= v <= 18.12.4161 CVE
20.0 <= v < 20.0.0.14941 CVE

Fixed in

18.0.2.3151 CVE
18.0.3.4611 CVE
18.0.8.9171 CVE
18.0.9.231 CVE
20.0.0.14941 CVE

Find a version

12 CVEs

Sort

High vulnerability · 2024-05-03
CVE-2023-27362
Patch
CWE-427
High · CVSS 7.8
EPSS 0.3% (25th pct)2024-05-03
Critical vulnerability · 2023-12-25
CVE-2023-49954
Patch
CWE-89
Critical · CVSS 9.8
EPSS 2.2% (81th pct)2023-12-25
High vulnerability · 2023-05-02
CVE-2022-48483
Patch
CWE-22
High · CVSS 7.5
EPSS 1.7% (74th pct)2023-05-02
High vulnerability · 2023-05-02
CVE-2022-48482
Public exploit
Patch
CWE-22
High · CVSS 7.5
EPSS 1.8% (76th pct)2023-05-02
High vulnerability · 2023-03-30
CVE-2023-29059
Public exploit
High · CVSS 7.8
EPSS 4.4% (90th pct)2023-03-30
Critical vulnerability · 2022-05-06
CVE-2022-28005
Critical · CVSS 9.8
EPSS 6.1% (93th pct)2022-05-06
Medium vulnerability · 2022-03-28
CVE-2021-45491
Public exploit
Medium · CVSS 6.5
EPSS 0.8% (52th pct)2022-03-28
Critical vulnerability · 2022-03-28
CVE-2021-45490
Public exploit
Critical · CVSS 9.1
EPSS 1.1% (61th pct)2022-03-28
High vulnerability · 2019-08-11
CVE-2019-14935
High · CVSS 7.8
EPSS 0.4% (29th pct)2019-08-11
High vulnerability · 2019-08-08
CVE-2019-13176
High · CVSS 7.5
EPSS 2.5% (83th pct)2019-08-08
Medium vulnerability · 2018-03-04
CVE-2018-7654
Medium · CVSS 6.5
EPSS 2.4% (82th pct)2018-03-04
Medium vulnerability · 2017-10-18
CVE-2017-15359
Public exploit
Medium · CVSS 6.5
EPSS 6.2% (93th pct)2017-10-18

3cx Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other 3cx products

Frequently asked questions

References

Track 3cx vulnerabilities