CVE-2018-14907

PoC —

CVSS 3.0

5.3 medium

EPSS

<1%p59

Published

Aug 3, 2018 (Aug 3, 2018)

Modified

Jun 17, 2026

Description

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname.

Vendors: 3cx
Products: 3cx web server
Weakness: CWE-209
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.