egain records
4 published records for vendor egain.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2019-13976No exploit | eGain Chat 15.0.3 allows unrestricted file upload.egain · chat · CWE-434 | Critical9.8 | — | 1.7% | Sep 4, 2019 |
30Monitor | CVE-2019-17123No exploit | The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as egain · mail · CWE-74 | High7.5 | — | 0.9% | Dec 13, 2019 |
24Monitor | CVE-2020-15948No exploit | eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.egain · chat · CWE-79 | Medium6.1 | — | 0.9% | Jul 30, 2021 |
24Monitor | CVE-2019-13975No exploit | eGain Chat 15.0.3 allows HTML Injection.egain · chat · CWE-79 | Medium6.1 | — | 0.8% | Sep 4, 2019 |
- CVE-2019-1397640Plan
eGain Chat 15.0.3 allows unrestricted file upload.
CriticalCVSS 9.8No exploitEPSS 1%egain · chatSep 4, 2019
- CVE-2019-1712330Monitor
The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as
HighCVSS 7.5No exploitEPSS 0%egain · mailDec 13, 2019
- CVE-2020-1594824Monitor
eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.
MediumCVSS 6.1No exploitEPSS 0%egain · chatJul 30, 2021
- CVE-2019-1397524Monitor
eGain Chat 15.0.3 allows HTML Injection.
MediumCVSS 6.1No exploitEPSS 0%egain · chatSep 4, 2019