Vulnerabilities > Nuance > Winscribe Dictation

DATE CVE VULNERABILITY TITLE RISK
2021-08-12 CVE-2021-37599 SQL Injection vulnerability in Nuance Winscribe Dictation 4.1.0.99
The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the database (and execute code in some situations) via the txtPassword parameter.
network
low complexity
nuance CWE-89
7.5
7.5