Nch

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Nch records in CISA KEV

No Nch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Axon Pbx 4 records MEDIUM Axon Virtual Pbx 1 record LOW Flexiserver 1 record LOW Quorum 1 record LOW Reflect Customer Relationship Management 1 record LOW Webdictate 1 record LOW

Records

9 records

TI-2018-08261 CVE-2018-11552 · GHSA-cpv6-j272-xmcq

There is a reflected XSS vulnerability in AXON PBX 2.02 via the…

MEDIUM 50

There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.28236 Published 2018-06-01 No fix listed CWE-79

TI-2021-15371 CVE-2021-37441 · GHSA-fhp2-3grf-9hfr

NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the…

MEDIUM 41

NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/..

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01474 Published 2021-07-25 No fix listed CWE-22

TI-2018-08260 CVE-2018-11551 · GHSA-r2mh-qjgm-rj3j

AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated…

LOW 39

AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02457 Published 2018-06-01 No fix listed CWE-426

TI-2021-15399 CVE-2021-37469 · GHSA-j2cf-55j7-464r

In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/..

LOW 31

In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/..

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01244 Published 2021-07-25 No fix listed CWE-22

TI-2021-15370 CVE-2021-37440 · GHSA-ggw7-rf9f-7rgg

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the…

LOW 31

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/..

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01244 Published 2021-07-25 No fix listed CWE-22

TI-2021-15369 CVE-2021-37439 · GHSA-v7rj-7455-pv9p

NCH FlexiServer v6.00 suffers from a syslog?file=/..

LOW 31

NCH FlexiServer v6.00 suffers from a syslog?file=/..

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01214 Published 2021-07-25 No fix listed CWE-22

TI-2009-03829 CVE-2009-4038 · GHSA-g3jg-85pj-3qh8

Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) onok or (2) oncancel parameter to the logon pro…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02412 Published 2009-11-20 No fix listed CWE-79

TI-2021-15382 CVE-2021-37452 · GHSA-2xwp-jx33-g2fj

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information…

LOW 24

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00264 Published 2021-07-25 No fix listed CWE-312

TI-2021-15398 CVE-2021-37468 · GHSA-jmp6-49pc-grvp

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by…

LOW 16

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00247 Published 2021-07-25 No fix listed CWE-312

Open these records in search →

Critical	0
High	2
Medium	6
Low	1
No CVSS	0