IT

Tracker / CVE-2025-47977

CVE-2025-47977

High 8.2

Improper neutralization of input during web page generation ('cross-site scripting') in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network.

Affected products and versions

microsoft nuance_digital_engagement_platform · … → 5.64.x

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References