Nchsoftware Quorum
8 CVEs affecting Nchsoftware Quorum. Latest disclosed: 2021-07-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-37447 | High | 8.1 | 2021-07-25 | In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion. |
CVE-2021-37445 | Medium | 6.5 | 2021-07-25 | In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading. |
CVE-2021-37467 | Medium | 5.4 | 2021-07-25 | In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected). |
CVE-2021-37466 | Medium | 5.4 | 2021-07-25 | In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected). |
CVE-2021-37465 | Medium | 5.4 | 2021-07-25 | In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected). |
CVE-2021-37464 | Medium | 5.4 | 2021-07-25 | In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored). |
CVE-2021-37463 | Medium | 5.4 | 2021-07-25 | In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored). |
CVE-2021-37446 | Medium | 4.3 | 2021-07-25 | In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading. |