Description
Improper neutralization of input during web page generation ('cross-site scripting') in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Nuance Digital Engagement Platform | 1.0.0 – < 5.64.x | 5.64.x |
Advisories 2
- MSRC-CVE-2025-47977 Nuance Digital Engagement Platform Spoofing Vulnerability Microsoft Security Response Center · Jun 12, 2025
- WID-SEC-2025-1275 Microsoft Azure: Schwachstelle ermöglicht Darstellen falscher Informationen BSI CERT-Bund (WID) · Jun 10, 2025
References
- Nuance Digital Engagement Platform Spoofing Vulnerability vendor-advisory patch