Softdial Contact Center vulnerabilities

2 known vulnerabilities in Softdial Contact Center from Sytel. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Softdial Contact Center: Unrestricted Upload of File with Dangerous Type

  CVE-2025-2494Mar 18, 2025Sytel

  Unrestricted file upload to Softdial Contact Center of Sytel Ltd. This vulnerability could allow an attacker to upload files to the server via the ‘/softdial/phpconsole/upload.php’ endpoint, which is protected by basic HTTP authentication. The files are upload

• 7.5 High severity

  Softdial Contact Center: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-2493Mar 18, 2025Sytel

  Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulate the ‘id’ parameter of the ‘/softdial/scheduler/load.php’ endpoint to navigate beyond the intended directory. This can allow unauthorised a