Nchsoftware Ivm Attendant
7 CVEs affecting Nchsoftware Ivm Attendant. Latest disclosed: 2021-07-25. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-37444 | High | 8.8 | 2021-07-25 | NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a Z… |
CVE-2021-37443 | High | 8.1 | 2021-07-25 | NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion. |
CVE-2021-37442 | Medium | 6.5 | 2021-07-25 | NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files. |
CVE-2021-37449 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected). |
CVE-2021-37448 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored). |
CVE-2021-37451 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected). |
CVE-2021-37450 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected). |