Approved changes feed: RSS · Atom

cpe:2.3:a:nice:recording_express:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNice (ba6167d6-9c2e-5cb6-8d92-9022d76aa260)
ProductRecording Express (f8804932-caa7-5fb7-82c0-42f7f5b07ba1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4308 vulnerable 2026-06-08 05:05:44.569654 Details available
Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) USRLNM parameter to myaccount/mysettings.edit.validate.asp or the frame parameter to (2) iframe.picker.statchannels.asp, (3) iframe.picker.channelgroups.asp, (4) iframe.picker.extensions.asp, (5) iframe.picker.licenseusergroups.asp, (6) iframe.picker.licenseusers.asp, (7) iframe.picker.lookup.asp, or (8) iframe.picker.marks.asp in _ifr/.
Published: 2014-06-18T14:00:00.000Z
Updated: 2024-09-17T02:11:04.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4305 vulnerable 2026-06-08 05:05:44.567281 Details available
Multiple SQL injection vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2014-06-18T14:00:00.000Z
Updated: 2024-09-17T01:15:53.843Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.