CVE-2018-11634: Dialogic Powermedia Xms

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web application's user passwords in cleartext by reading /var/www/xms/xmsdb/default.db.

Affected products

• Dialogic Powermedia Xms: up to and including 3.5; version 3.5 only

Published 2018-07-03. Last modified 2026-06-17.