CVE-2021-37599: Nuance Winscribe Dictation

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the database (and execute code in some situations) via the txtPassword parameter.

Affected products

• Nuance Winscribe Dictation: version 4.1.0.99 only

Published 2021-08-12. Last modified 2026-06-17.