CVE-2024-48352

Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID

High · published November 1, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
40.3
In the wild
Unconfirmed
What it is

Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00478 · 40.3th percentile
Published
2024-11-01T00:00Z
EPSS history
Timeline
  • 01 NOV 00:00Z
    Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID
    cvelistv5