Vulnerabilities (CVE)

Filtered by vendor Com2001 Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-1253 1 Com2001 1 Alexis Server 2024-02-04 4.6 MEDIUM N/A
Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users.
CVE-2001-1254 1 Com2001 1 Alexis Server 2024-02-04 7.5 HIGH N/A
Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing.