3cx 3cx

Name: 3cx 3cx
Brand: 3cx

productUS

cpe:2.3:a:3cx:3cx:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical6high3medium0low

updated 2026-10-27

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-15359US	medium6.5	6.17% (93rd)	Exploit	no fix	2017-10-18	= 15.5.3554.1
CVE-2023-49954US	critical9.8	2.24% (83rd)	Exploit	18.0.9.23	2023-12-25	2 versions
CVE-2022-28005US	critical9.8	8.35% (95th)	—	no fix	2022-05-06	≤ 18.0.3.450
CVE-2023-29059US	high7.8	4.37% (91st)	—	no fix	2023-03-30	4 versions
CVE-2019-13176US	high7.5	2.46% (84th)	—	no fix	2019-08-08	2 versions
CVE-2018-7654US	medium6.5	2.38% (84th)	—	no fix	2018-03-04	= 15.5.6354.2
CVE-2022-48482US	high7.5	2.19% (82nd)	—	18.0.2.315	2023-05-02	< 18.0.2.315
CVE-2022-48483US	high7.5	2.01% (81st)	—	18.0.3.461	2023-05-02	< 18.0.3.461
CVE-2021-45490US	critical9.1	1.09% (65th)	—	no fix	2022-03-28	3 versions
CVE-2021-45491US	medium6.5OT elevated	0.92% (60th)	—	no fix	2022-03-28	≤ 2022-03-17
CVE-2023-27362US	high7.8	0.40% (34th)	—	18.0.8.917	2024-05-03	18.0.0.451 → 18.0.8.917
CVE-2019-14935US	high7.8	0.39% (33rd)	—	no fix	2019-08-12	= 15

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-295Improper Certificate Validation1 CVEs
CWE-312Cleartext Storage of Sensitive Information1 CVEs
CWE-427Uncontrolled Search Path Element1 CVEs
CWE-506Embedded Malicious Code1 CVEs
CWE-522Insufficiently Protected Credentials1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.