Nch

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-37441 1Nch 1Axon Pbx Jun 17, 2026 Jul 25, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring.
CVE-2021-37440 1Nch 1Axon Pbx Jun 17, 2026 Jul 25, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.
CVE-2021-37439 1Nch 1Flexiserver Jun 17, 2026 Jul 25, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability.
CVE-2021-37469 1Nch 1Webdictate Jun 17, 2026 Jul 25, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem.
CVE-2021-37468 1Nch 1Reflect Customer Relationship Management Jun 17, 2026 Jul 25, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.
CVE-2021-37452 1Nch 1Quorum Jun 17, 2026 Jul 25, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files.
CVE-2018-11552 1Nch 1Axon Pbx Nov 21, 2024 Jun 1, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitr...Show more There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitrary HTML and script code in a browser in the context of the vulnerable application.Show less
CVE-2018-11551 1Nch 1Axon Pbx Nov 21, 2024 Jun 1, 2018 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability exists because a DLL file is loaded by 'pbxsetup...Show more AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability exists because a DLL file is loaded by 'pbxsetup.exe' improperly.Show less
CVE-2009-4038 1Nch 1Axon Virtual Pbx Apr 23, 2026 Nov 20, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) onok or (2) oncancel parameter to the logon pro...Show more Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) onok or (2) oncancel parameter to the logon program. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less