Sytel vulnerabilities
We track 2 vulnerabilities in Sytel products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 18, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Sytel vulnerabilities
- 9.8 Critical severity
Softdial Contact Center: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload to Softdial Contact Center of Sytel Ltd. This vulnerability could allow an attacker to upload files to the server via the ‘/softdial/phpconsole/upload.php’ endpoint, which is protected by basic HTTP authentication. The files are upload
- 7.5 High severity
Softdial Contact Center: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulate the ‘id’ parameter of the ‘/softdial/scheduler/load.php’ endpoint to navigate beyond the intended directory. This can allow unauthorised a