https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-23208.htmlhttps://patchthecve.com/cve/CVE-2023-23208.htmlWed, 17 Jun 2026 05:36:47 +0000MEDIUM 6.1: Genesys Administrator Extension (GAX) before 9.0.105.15 is vulnerable to Cross Site Scripting (XSS) via the Business Structure page of the iWD plugin, aka GAX-11261.https://patchthecve.com/cve/CVE-2023-29930.htmlhttps://patchthecve.com/cve/CVE-2023-29930.htmlWed, 17 Jun 2026 05:51:05 +0000HIGH 8.8: An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via the login crednetials to the TFTP server configuration page.https://patchthecve.com/cve/CVE-2022-37775.htmlhttps://patchthecve.com/cve/CVE-2022-37775.htmlThu, 09 Jul 2026 01:17:39 +0000MEDIUM 6.1: Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter.