Nch

9 CVEs across 6 Nch products. Browse Nch vulnerabilities, severities, and proof-of-concept exploits.

Nch products with known CVEs

ProductCVEs
Axon Pbx4
Axon Virtual Pbx1
Flexiserver1
Quorum1
Reflect Customer Relationship Management1
Webdictate1
Nch CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-37441High8.82021-07-25NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring.
CVE-2021-37440Medium6.52021-07-25NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.
CVE-2021-37439Medium6.52021-07-25NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability.
CVE-2021-37469Medium6.52021-07-25In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem.
CVE-2021-37468Low3.32021-07-25NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.
CVE-2021-37452Medium5.52021-07-25NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files.
CVE-2018-11552Medium6.12018-06-01There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient filtratio…
CVE-2018-11551High7.82018-06-01AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The v…
CVE-2009-40382009-11-20Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTM…