The vulnerability of the web server of the Nuance Digital Engagement Platform’s operating system Windows allows a attacker to perform XSS attacks.

The vulnerability of the Windows operating system-based version of the Nuance Digital Engagement Platform’s web server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-47977 Nuance Digital Engagement Platform Spoofing Vulnerability

...

CVE-2025-47977

CVE-2025-47977 is a cross-site scripting (XSS) flaw in Nuance Digital Engagement Platform caused by improper neutralization of input during web page generation. The vulnerability allows an unauthenticated or unauthorized user to craft input that the system renders, enabling spoofing over a networ...

CVE-2025-47977 Nuance Digital Engagement Platform Spoofing Vulnerability

...

Nuance Digital Engagement Platform Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

PT-2025-24883 · Nuance · Nuance Digital Engagement Platform

Name of the Vulnerable Software and Affected Versions: Nuance Digital Engagement Platform affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows an authorized attacker to...

Microsoft Nuance Digital Engagement Platform 跨站脚本漏洞

Microsoft Nuance Digital Engagement Platform is a powerful customer engagement platform from Microsoft Corporation USA that combines Nuance's deep expertise in conversational artificial intelligence AI with Microsoft's cloud services and AI innovations. A cross-site scripting vulnerability exists...

CVE-2021-37599

The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the database and execute code in some situations via the txtPassword parameter...

CVE-2010-5209

Multiple untrusted search path vulnerabilities in Nuance PDF Reader 6.0 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 exceptiondumpdll.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these details are...

CVE-2013-0113

Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document...

Malicious code in nuance-mix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b788479065c5160a08f7fcf3a2144521ea22a444ff39554c3c51f7c0ecec1c48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9447 Malicious code in nuance-mix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b788479065c5160a08f7fcf3a2144521ea22a444ff39554c3c51f7c0ecec1c48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

nuances-deco.fr Cross Site Scripting vulnerability OBB-3080377

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Nuance Winscribe Dictation SQL Injection (CVE-2021-37599)

An SQL injection vulnerability exists in Nuance Winscribe Dictation. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Nuance Winscribe Dictation SQL Injection Vulnerability

Nuance Winscribe Dictation is an automated workflow solution from Nuance. Create and share high-quality documents and simplify complex workflows in a more efficient and flexible way. Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection. The vulnerability stems from the fact that the...

CVE-2021-37599

The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the database and execute code in some situations via the txtPassword parameter...

Sql injection

The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the database and execute code in some situations via the txtPassword parameter...