Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Com2001 Subscribe
Filtered by product Alexis Server
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-1254 1 Com2001 1 Alexis Server 2008-09-10 7.5 HIGH N/A
Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing.
CVE-2001-1253 1 Com2001 1 Alexis Server 2008-09-05 4.6 MEDIUM N/A
Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users.