FreePBX endpoint manager vulnerabilities

Latest FreePBX endpoint manager CVEs

Newest publication first

1. CVE-2024-47071 OSS Endpoint Manager allows unauthorized access to read system files

   Published 2024-10-01

   Medium·CVSS 6.8 EPSS 0.51%

   OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.