Splicecom Maximiser Soft Pbx — known CVE vulnerabilities

Every CVE whose affected-product data names Splicecom Maximiser Soft Pbx, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-33759 — CVSS 9.8 (critical): SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass…
• CVE-2023-33758 — CVSS 6.1 (medium): Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT_NAME and…
• CVE-2023-33760 — CVSS 5.3 (medium): SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to…