Security Update News
Update Information
| Title | Nuance Digital Engagement Platform Spoofing Vulnerability |
|---|---|
| Update ID | MS:CVE-2025-47977 |
| Type | mscve |
| Published | 2025-06-10T07:00:00 |
| Last Updated | 2025-06-10T07:00:00 |
Security Impact
| CVSS Score | 7.6 |
|---|---|
| Severity | HIGH |
| Attack Vector | NETWORK |
Affected CVEs
- CVE-2025-47977
Update Details
Improper neutralization of input during web page generation (‘cross-site scripting’) in Nuance Digital Engagement Platform allows an authorized attacker to perform spoofing over a network.