Vendor
Eleveo
23 known vulnerabilities.
5 results · Clear filters · Feed
-
Low 3.5
Eleveo Call Recording Software logout session expiration
A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connect/logout. The manipulation leads to session expiration. Remote exploitation of the…
-
Low 2.6
Eleveo Call Recording Software JWT Token logout get request method with sensitive query strings
A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument…
-
Low 3.5
Eleveo Call Recording Software Play Audio audio.jsp cross site scripting
A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The at…
-
Low 3.5
Eleveo Quality Management Conversation Review cross site scripting
A vulnerability has been found in Eleveo Quality Management 9.7.0. This vulnerability affects unknown code of the component Conversation Review. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has bee…
-
Low 3.5
Eleveo Call Recording Software roleAddAction.do cross site scripting
A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/username can lead to cross site scripting. The attack may be launched remotely. Th…