Vendors / Enghouse Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Enghouse records in CISA KEV No Enghouse vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01335 · Published 2019-11-13 · No fix listed CWE-918
Priority MEDIUM 45
ClientServiceConfigController.cs in Enghouse Cloud Contact Center Platform 7.2.5 has functionality for loading external XML files and parsing them, allowing an attacker to upload a malicious XML file and reference it in…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01628 · Published 2019-05-14 · No fix listed CWE-611
Priority LOW 35
A privilege escalation vulnerability exists within the Qumu Multicast Extension v2 before 2.0.63 for Windows.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2023-10-19 · No fix listed CWE-269
Priority LOW 30
An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00783 · Published 2019-11-13 · No fix listed CWE-20
Priority LOW 28
Enghouse Web Chat 6.2.284.34 allows XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00686 · Published 2020-09-03 · No fix listed CWE-79
Priority LOW 28
An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00686 · Published 2019-11-13 · No fix listed CWE-79
Priority LOW 26
A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00952 · Published 2019-11-13 · No fix listed CWE-829
Open these records in search → All records by CVSS severity
Critical2 High1 Medium4 Low0 No CVSS0