CVE-2009-4038

no score yetEPSS 2.4%

nch axon virtual pbx: no CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) onok or (2) oncancel parameter to the logon program. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2009-11-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

nch:axon_virtual_pbx

References

http://osvdb.org/59871
http://secunia.com/advisories/37157
http://osvdb.org/59871
http://secunia.com/advisories/37157

Check your stack JSON