← Database

CVE-2021-37599

CRITICAL CVSS: 9.8 Published: 2021-08-12 Modified: 2026-06-17

Description

The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the database (and execute code in some situations) via the txtPassword parameter.

Affected Platforms

Nuance Winscribe Dictation

Weakness Type

CWE-89

References