CVE

CVE-2021-45967

9.8

CVSS

Description

An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints.

Attack Vector

Privileges Req.

User Interaction

Updated Sep 14, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2021-45967 Scanner

CVE-2021-45967 scanner - Path Traversal vulnerability in Pascom Cloud Phone System

Used 3.5k times · 5.9k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →