Nchsoftware

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Nchsoftware records in CISA KEV

No Nchsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Axon Pbx 10 records LOW Quorum 8 records LOW Ivm Attendant 7 records MEDIUM Express Invoice 4 records MEDIUM Express Accounts 2 records LOW Express Accounts Accounting 1 record LOW Meo Encryption Software 1 record LOW Webdictate 1 record LOW

Records

10 records in Axon Pbx · all components

TI-2021-15392 CVE-2021-37462 · GHSA-6vcf-779f-fqxh

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).

LOW 25

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15391 CVE-2021-37461 · GHSA-cjm3-84jp-72rj

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).

LOW 25

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15390 CVE-2021-37460 · GHSA-2vhc-x6qx-p838

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).

LOW 25

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15389 CVE-2021-37459 · GHSA-hjqj-7pgg-p4w5

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).

LOW 25

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2021-07-25 No fix listed CWE-79

TI-2021-15388 CVE-2021-37458 · GHSA-6q5j-v2m7-pmxq

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).

LOW 25

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2021-07-25 No fix listed CWE-79

TI-2021-15387 CVE-2021-37457 · GHSA-mmq7-4wfx-jq6v

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).

LOW 25

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2021-07-25 No fix listed CWE-79

TI-2021-15386 CVE-2021-37456 · GHSA-wr7f-jq3g-39hr

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).

LOW 25

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15385 CVE-2021-37455 · GHSA-fvmx-p232-v8f7

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).

LOW 25

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15384 CVE-2021-37454 · GHSA-xr96-frvr-5w4p

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).

LOW 25

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15383 CVE-2021-37453 · GHSA-68x8-8r67-v8mj

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).

LOW 25

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

Open these records in search →

Critical	0
High	5
Medium	29
Low	0
No CVSS	0