Skip to content
OpenAdvisories

Vendor

FreePBX

44 known vulnerabilities.

Products

security-reporting 15 framework 5 endpoint 4 api 3 endpointman 2 tts 2 missedcall 1 music 1 ucp 1 FreePBX 1 contactmanager 1 restapps 1 cdr 1 core 1 arimanager 1 backup 1 voicemail 1 FreePBX Framework 1 filestore 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.0
    CVE-2025-55210

    FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes

    FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk. Prior to 17.0.5 and 16.0.17, FreePBX module api (PBX API) is vulnerable to privilege escalation by authenticated users with REST/GraphQL API access. This vulnerability a…

    FreePBX api
  • Low 3.5
    CVE-2019-25090

    FreePBX arimanager Views cross site scripting

    A vulnerability was found in FreePBX arimanager up to 13.0.5.3 and classified as problematic. Affected by this issue is some unknown functionality of the component Views Handler. The manipulation of the argument dataurl leads to cross site scripting. The atta…

    FreePBX arimanager
  • Low 3.5
    CVE-2021-4282

    FreePBX voicemail page.voicemail.php cross site scripting

    A vulnerability was found in FreePBX voicemail. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file page.voicemail.php. The manipulation leads to cross site scripting. The attack can be launched remotely…

    FreePBX voicemail