Nchsoftware

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Nchsoftware records in CISA KEV

No Nchsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Axon Pbx 10 records LOW Quorum 8 records LOW Ivm Attendant 7 records MEDIUM Express Invoice 4 records MEDIUM Express Accounts 2 records LOW Express Accounts Accounting 1 record LOW Meo Encryption Software 1 record LOW Webdictate 1 record LOW

Records

8 records in Quorum · all components

TI-2021-15377 CVE-2021-37447 · GHSA-5f35-m38v-fx5q

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via…

LOW 38

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/..

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01584 Published 2021-07-25 No fix listed CWE-22

TI-2021-15375 CVE-2021-37445 · GHSA-6c69-w7wc-qm57

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via…

LOW 32

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/..

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01431 Published 2021-07-25 No fix listed CWE-22

TI-2021-15397 CVE-2021-37467 · GHSA-97ch-c87j-pv6w

In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).

LOW 25

In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15396 CVE-2021-37466 · GHSA-wqm2-557c-9f7f

In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).

LOW 25

In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15395 CVE-2021-37465 · GHSA-h87x-pp5f-2j2c

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).

LOW 25

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15394 CVE-2021-37464 · GHSA-x45v-6f95-pwxq

In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).

LOW 25

In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15393 CVE-2021-37463 · GHSA-whhr-6mwm-777h

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).

LOW 25

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15376 CVE-2021-37446 · GHSA-wvj6-3rxh-53hh

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via…

LOW 22

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/..

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01155 Published 2021-07-25 No fix listed CWE-22

Open these records in search →