CVE-2021-37448: XSS
Published Jul 25, 2021
·Updated
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).
Affected Software
1 affected component
Nchsoftware Ivm Attendant<=5.12
Event History
Jul 25, 2021
CVE Published
via MITRE·08:12 PM
Data Sourced
via MITRE·08:12 PM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-37448?
CVE-2021-37448 is a vulnerability that allows for Cross Site Scripting (XSS) attacks in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).
2
How severe is CVE-2021-37448?
CVE-2021-37448 has a severity rating of medium with a CVSS score of 5.4.
3
How does CVE-2021-37448 affect NCH IVM Attendant?
CVE-2021-37448 affects NCH IVM Attendant v5.12 and earlier by allowing for Cross Site Scripting (XSS) attacks via the Mailbox name (stored).
4
How can I fix CVE-2021-37448?
To fix CVE-2021-37448, it is recommended to update NCH IVM Attendant to a version beyond v5.12.
5
What is the Common Weakness Enumeration (CWE) for CVE-2021-37448?
The CWE for CVE-2021-37448 is CWE-79, which is the code for Improper Neutralization of Input During Web Page Generation (XSS).