VULNERABILITY INTELLIGENCE

CVE-2024-52882

CVSS score6.1 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-02-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to improper neutralization of input via the devices API, an attacker can inject malicious JavaScript code (XSS) to attack logged-in administrator sessions.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-79

Primary references