Vulnerabilities

Filters

2 selected

8 records

Sort

Vendor: Nchsoftware Component: Quorum Clear all filters

TI-2021-15375 CVE-2021-37445 · GHSA-6c69-w7wc-qm57

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via…

LOW 32

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/..

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01431 Published 2021-07-25 No fix listed CWE-22

TI-2021-15376 CVE-2021-37446 · GHSA-wvj6-3rxh-53hh

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via…

LOW 22

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/..

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01155 Published 2021-07-25 No fix listed CWE-22

TI-2021-15377 CVE-2021-37447 · GHSA-5f35-m38v-fx5q

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via…

LOW 38

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/..

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01584 Published 2021-07-25 No fix listed CWE-22

TI-2021-15393 CVE-2021-37463 · GHSA-whhr-6mwm-777h

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).

LOW 25

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15394 CVE-2021-37464 · GHSA-x45v-6f95-pwxq

In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).

LOW 25

In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15395 CVE-2021-37465 · GHSA-h87x-pp5f-2j2c

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).

LOW 25

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15396 CVE-2021-37466 · GHSA-wqm2-557c-9f7f

In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).

LOW 25

In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79

TI-2021-15397 CVE-2021-37467 · GHSA-97ch-c87j-pv6w

In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).

LOW 25

In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2021-07-25 No fix listed CWE-79