Vulnerabilities > Enghouse
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-19 | CVE-2023-45883 | Unspecified vulnerability in Enghouse Qumu 2.0.0 A privilege escalation vulnerability exists within the Qumu Multicast Extension v2 before 2.0.63 for Windows. | 7.8 |
| 2020-09-03 | CVE-2020-13972 | Cross-site Scripting vulnerability in Enghouse web Chat 6.2.284.34 Enghouse Web Chat 6.2.284.34 allows XSS. | 6.1 |
| 2019-11-13 | CVE-2019-16951 | Inclusion of Functionality from Untrusted Control Sphere vulnerability in Enghouse web Chat 6.1.300.31/6.2.284.34 A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. | 5.3 |
| 2019-11-13 | CVE-2019-16950 | Cross-site Scripting vulnerability in Enghouse web Chat 6.1.300.31/6.2.284.34 An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. | 6.1 |
| 2019-11-13 | CVE-2019-16949 | Improper Input Validation vulnerability in Enghouse web Chat 6.1.300.31/6.2.284.34 An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. | 6.5 |
| 2019-11-13 | CVE-2019-16948 | Server-Side Request Forgery (SSRF) vulnerability in Enghouse web Chat 6.1.300.31 An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. | 9.8 |
| 2019-05-14 | CVE-2018-8940 | XXE vulnerability in Enghouse Contact Center: Service Provider 7.2.5 ClientServiceConfigController.cs in Enghouse Cloud Contact Center Platform 7.2.5 has functionality for loading external XML files and parsing them, allowing an attacker to upload a malicious XML file and reference it in the URL of the application, forcing the application to load and parse the malicious XML file, aka an XXE issue. | 9.8 |