CVE-2019-12927
08.07.2019, 22:15
MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulnerability.
| Vendor | Product | Version |
|---|---|---|
| mailenable | mailenable | 6.0 ≤ 𝑥 < 6.90 |
| mailenable | mailenable | 7.0 ≤ 𝑥 < 7.62 |
| mailenable | mailenable | 8.00 ≤ 𝑥 < 8.64 |
| mailenable | mailenable | 9.0 ≤ 𝑥 < 9.83 |
| mailenable | mailenable | 10.00 ≤ 𝑥 < 10.24 |
𝑥
= Vulnerable software versions
References