What’s Vulnerable › Vulnerabilities

CVE-2018-15508

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-21 · updated 2026-06-17
• Weakness: CWE-732

Description

Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhone(issue 1 of 2).

Affected products

• five9 Agent Desktop Plus: 10.0.70

References

• https://0tkombo.wixsite.com/0tkombo/blog/five9-dos-websocket-access
• https://0tkombo.wixsite.com/0tkombo/blog/five9-dos-websocket-access

Get alerted when CVE-2018-15508 or the next vulnerability affects your stack