Known Vulnerabilities for products from Nchsoftware
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Nchsoftware".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-37470 json | In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can ... | 5.4 - MEDIUM | 2021-07-25 | 2021-07-30 |
| CVE-2021-37467 json | In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-30 |
| CVE-2021-37466 json | In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-30 |
| CVE-2021-37465 json | In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-30 |
| CVE-2021-37464 json | In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-30 |
| CVE-2021-37463 json | In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-30 |
| CVE-2021-37462 json | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37461 json | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37460 json | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37459 json | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37458 json | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37457 json | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37456 json | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37455 json | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37454 json | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37453 json | Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37451 json | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37450 json | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected). | 5.4 - MEDIUM | 2021-07-25 | 2021-07-28 |
| CVE-2021-37449 json | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected). | 5.4 - MEDIUM | 2021-07-25 | 2021-08-04 |
| CVE-2021-37448 json | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored). | 5.4 - MEDIUM | 2021-07-25 | 2021-08-04 |
Known software with vulnerabilities from Nchsoftware
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Nchsoftware | Express Accounts | - |
| Application | Nchsoftware | Express Accounts Accounting | 7.02 |
| Application | Nchsoftware | Express Invoice | 3.69 |