CVE-2001-1254: COM2001 Alexis Server

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing.

Affected products

• COM2001 Alexis Server: version 2.0 only; version 2.1 only

Published 2001-09-27. Last modified 2026-06-16.