Vulnerabilities (CVE)

Filtered by vendor Nchsoftware Subscribe
Filtered by product Ivm Attendant
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-37448 1 Nchsoftware 1 Ivm Attendant 2021-08-04 3.5 LOW 5.4 MEDIUM
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).
CVE-2021-37449 1 Nchsoftware 1 Ivm Attendant 2021-08-04 3.5 LOW 5.4 MEDIUM
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).
CVE-2021-37442 1 Nchsoftware 1 Ivm Attendant 2021-07-30 4.0 MEDIUM 6.5 MEDIUM
NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.
CVE-2021-37450 1 Nchsoftware 1 Ivm Attendant 2021-07-28 3.5 LOW 5.4 MEDIUM
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected).
CVE-2021-37451 1 Nchsoftware 1 Ivm Attendant 2021-07-28 3.5 LOW 5.4 MEDIUM
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected).