Nchsoftware

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Nchsoftware records in CISA KEV

No Nchsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Axon Pbx 10 records LOW Quorum 8 records LOW Ivm Attendant 7 records MEDIUM Express Invoice 4 records MEDIUM Express Accounts 2 records LOW Express Accounts Accounting 1 record LOW Meo Encryption Software 1 record LOW Webdictate 1 record LOW

Records

7 records in Ivm Attendant · all components

TI-2021-15374 CVE-2021-37444 · GHSA-jxmw-mmc4-3375

NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon…

MEDIUM 42

NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01935 Published 2021-07-25 No fix listed CWE-22

TI-2021-15373 CVE-2021-37443 · GHSA-98ff-8p4p-47qw

NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.

LOW 38

NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01246 Published 2021-07-25 No fix listed CWE-22

TI-2021-15372 CVE-2021-37442 · GHSA-83w5-49r2-whcp

NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/..

LOW 31

NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/..

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01214 Published 2021-07-25 No fix listed CWE-22

TI-2021-15381 CVE-2021-37451 · GHSA-hwg2-xqqq-h8xm

Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected).

LOW 25

Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2021-07-25 No fix listed CWE-79

TI-2021-15380 CVE-2021-37450 · GHSA-f33j-wqvh-v747

Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected).

LOW 25

Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15379 CVE-2021-37449 · GHSA-w674-wrgq-h24p

Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).

LOW 25

Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00504 Published 2021-07-25 No fix listed CWE-79

TI-2021-15378 CVE-2021-37448 · GHSA-wmhm-6wjf-7hp9

Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).

LOW 25

Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00532 Published 2021-07-25 No fix listed CWE-79

Open these records in search →

Critical	0
High	5
Medium	29
Low	0
No CVSS	0