Zenitel vulnerabilities
Every vulnerability this feed holds for Zenitel, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
5 vulnerabilities tracked.
- 6.9 The web interface in Zenitel Connect before 1.11.0 serves production JavaScript source maps without authentication, which allows remote…
- 6.9 The login flow in Zenitel Connect before 1.11.0 applies per-account lockout on repeated failed login attempts, which allows remote…
- 6.9 The login flow in Zenitel Connect before 1.11.0 returns different error responses depending on whether a submitted username exists, which…
- 6.3 Improper restriction of excessive authentication attempts in the WAMP-CRA (challenge-response) authentication path in Zenitel Connect…
- 5.1 The web interface in Zenitel Connect before 1.11.0 loads an integration iframe without sandboxing or origin restrictions, which allows…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Zenitel is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Linux Red Hat Google n/a Apple Apache Software Foundation Oracle Corporation zephyrproject FFMPEG Unknown Fortinet Adobe OpenEMR Dell Drupal SAP_SE Cisco Eclipse Foundation n8n-io erlang AMD Grafana Progress Software