Skip to content
Noroxi

Afterlogic records

12 published records for vendor afterlogic.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 21
  4. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

12 records
  • CVE-2021-26293
    41Plan

    An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled.

    CriticalCVSS 9.8No exploitEPSS 7%

    afterlogic · auroraMar 4, 2021

  • CVE-2021-26294
    35Monitor

    An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9.

    HighCVSS 7.5Proof of conceptEPSS 16%

    afterlogic · auroraMar 7, 2021

  • CVE-2023-43176
    35Monitor

    A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabred

    HighCVSS 8.8No exploitEPSS 1%

    afterlogic · aurora filesOct 3, 2023

  • CVE-2019-16238
    24Monitor

    Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the admin

    MediumCVSS 6.1No exploitEPSS 0%

    afterlogic · auroraSep 12, 2019

  • CVE-2019-19129
    24Monitor

    Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name.

    MediumCVSS 6.1No exploitEPSS 0%

    afterlogic · auroraNov 26, 2019

  • CVE-2008-0333
    23Monitor

    Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers

    MediumCVSS 5.0Proof of conceptEPSS 11%

    afterlogic · mailbee webmail proJan 17, 2008

  • CVE-2017-14597
    19Monitor

    AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addi

    MediumCVSS 4.8No exploitEPSS 0%

    afterlogic · auroraSep 19, 2017

  • CVE-2007-5290
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.

    MediumCVSS 4.3Proof of conceptEPSS 3%

    afterlogic · mailbee webmailOct 9, 2007

  • CVE-2008-0631
    18Monitor

    Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files via the SaveToDisk m

    MediumCVSS 4.3Proof of conceptEPSS 3%

    afterlogic · mailbee objectsFeb 6, 2008

  • CVE-2007-2061
    18Monitor

    Cross-site scripting (XSS) vulnerability in check_login.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrar

    MediumCVSS 4.3Proof of conceptEPSS 1%

    afterlogic · mailbee webmailApr 17, 2007

  • CVE-2009-4743
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attack

    MediumCVSS 4.3Proof of conceptEPSS 1%

    afterlogic · webmail proMar 26, 2010

  • CVE-2012-2587
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arbitrary web script or

    MediumCVSS 4.3Proof of conceptEPSS 1%

    afterlogic · mailsuite proAug 12, 2012