CVE-2024-52882

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582

Medium · published February 7, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to improper neutralization of input via the devices API, an attacker can inject malicious JavaScript code (XSS) to attack logged-in administrator sessions.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.7th percentile
Published
2025-02-07T00:00Z
EPSS history
Timeline
  • 07 FEB 00:00Z
    An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582
    cvelistv5