{
  "product": "3CXPhone for Windows",
  "url": "https://patchblox.com/security/product/windows-app/3cxphone-for-windows",
  "summary": "The latest version of 3CXPhone for Windows is 16.3.0.264, released August 11, 2021. Patch Radar has 0 security fixes for 3CXPhone for Windows, closing 0 CVEs. 6 CVEs have no fix yet.",
  "platform": "windows-app",
  "vendor": "3CX",
  "supported": true,
  "latestVersion": "16.3.0.264",
  "latestReleased": "2021-08-11T00:00:00Z",
  "fixCount": 0,
  "cveCount": 0,
  "exploitedCveCount": 0,
  "unfixedCveCount": 6,
  "fixes": [],
  "noFixYet": [
    {
      "cveId": "CVE-2021-45490",
      "url": "https://patchblox.com/security/cve/CVE-2021-45490",
      "title": "3CXPhone for Windows: The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through\u2026",
      "priority": "Urgent",
      "status": "no-fix",
      "affectedVersion": "16.3.0.264"
    },
    {
      "cveId": "CVE-2022-28005",
      "url": "https://patchblox.com/security/cve/CVE-2022-28005",
      "title": "3CXPhone for Windows: An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL.",
      "priority": "Urgent",
      "status": "no-fix",
      "affectedVersion": "16.3.0.264"
    },
    {
      "cveId": "CVE-2023-49954",
      "url": "https://patchblox.com/security/cve/CVE-2023-49954",
      "title": "3CXPhone for Windows: Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
      "priority": "Urgent",
      "status": "no-fix",
      "affectedVersion": "16.3.0.264"
    },
    {
      "cveId": "CVE-2022-48482",
      "url": "https://patchblox.com/security/cve/CVE-2022-48482",
      "title": "3CXPhone for Windows: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "16.3.0.264"
    },
    {
      "cveId": "CVE-2022-48483",
      "url": "https://patchblox.com/security/cve/CVE-2022-48483",
      "title": "3CXPhone for Windows: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "16.3.0.264"
    },
    {
      "cveId": "CVE-2021-45491",
      "url": "https://patchblox.com/security/cve/CVE-2021-45491",
      "title": "3CXPhone for Windows: 3CX System through 2022-03-17 stores cleartext passwords in a database.",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "16.3.0.264"
    }
  ],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}