Enghouse
4 CVEs tracked since 2019. Since Nov 2019, none of them reached CISA KEV.
Enghouse CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2019-11 | 4 | 0 |
Products
The products that kept showing up in Enghouse's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 7 most recently published vulnerabilities affecting Enghouse.
- CVE-2023-45883A privilege escalation vulnerability exists within the Qumu Multicast Extension v2 before 2.0.63 for Windows. When a standard user triggers a repair of the software, a pop-up window opens with SYST...7.8
- CVE-2020-13972Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from...6.1
- CVE-2019-16951A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribute with one's own domain name. When the product calls this domain after the PO...5.3
- CVE-2019-16950An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request allows for insertion of user-supplied JavaScript.6.1
- CVE-2019-16949An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. A user is allowed to send an archive of their chat log to an email address specified at the beginning of the chat (where the ...6.5
- CVE-2019-16948An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports t...9.8
- CVE-2018-8940ClientServiceConfigController.cs in Enghouse Cloud Contact Center Platform 7.2.5 has functionality for loading external XML files and parsing them, allowing an attacker to upload a malicious XML fi...9.8
The record
- Peak rank
- #88 in Nov 2019
- Busiest month shown
- Nov 2019, 4 CVEs
- Months with a KEV entry
- 0 since Nov 2019
- Monthly snapshots
- 1 since 2019