TCIV-3+ vulnerabilities
4 known vulnerabilities in TCIV-3+ from Zenitel. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
TCIV-3+: Improper Neutralization of Input During Web Page Generation
Zenitel TCIV-3+ is vulnerable to a reflected cross-site scripting vulnerability, which could allow a remote attacker to execute arbitrary JavaScript on the victim's browser.
- 10.0 Critical severity
TCIV-3+: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists due to incomplete validation of user-supplied input. Validation fails to enforce sufficient formatting rules, which could permit attackers to append arbitrary data. This could allow an unauthenticated attacker to in
- 10.0 Critical severity
TCIV-3+: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to e
- 10.0 Critical severity
TCIV-3+: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP address or filtering potentially malicious characters. This could allow an unauthenti