Description

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to improper neutralization of input via the devices API, an attacker can inject malicious JavaScript code (XSS) to attack logged-in administrator sessions.

Classification

CVE ID: CVE-2024-52882

Affected Products

Vendor: n/a

Product: n/a

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.87% (scored less or equal to compared to others)

EPSS Date: 2025-03-08 (when was this score calculated)

References

https://www.audiocodes.com/solutions-products/products/management-products-solutions/one-voice-operations-center
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-076.txt

Timeline