Vulnerabilities > Zenitel > Alphacom XE Audio Server

DATE CVE VULNERABILITY TITLE RISK
2021-09-15 CVE-2021-40845 Unrestricted Upload of File with Dangerous Type vulnerability in Zenitel Alphacom XE Audio Server
The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php.
network
low complexity
zenitel CWE-434
6.5