Security Vulnerabilities - CVEs Published In 2021
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
CVSS Score
5.4
EPSS Score
0.006
Published
2021-07-25
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
CVSS Score
5.4
EPSS Score
0.006
Published
2021-07-25
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
CVSS Score
5.4
EPSS Score
0.006
Published
2021-07-25
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
CVSS Score
5.4
EPSS Score
0.006
Published
2021-07-25
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).
CVSS Score
5.4
EPSS Score
0.006
Published
2021-07-25
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).
CVSS Score
5.4
EPSS Score
0.006
Published
2021-07-25
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).
CVSS Score
5.4
EPSS Score
0.006
Published
2021-07-25
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).
CVSS Score
5.4
EPSS Score
0.006
Published
2021-07-25
In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).
CVSS Score
5.4
EPSS Score
0.006
Published
2021-07-25
NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.
CVSS Score
3.3
EPSS Score
0.002
Published
2021-07-25