İçeriğe atla
Noroxi

Afterlogic kayıtları

afterlogic üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 21
  4. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

12 kayıt
  • CVE-2021-26293
    41Planlayın

    An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled.

    KritikCVSS 9,8İstismar yokEPSS %7

    afterlogic · aurora4 Mar 2021

  • CVE-2021-26294
    35İzleyin

    An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9.

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    afterlogic · aurora7 Mar 2021

  • CVE-2023-43176
    35İzleyin

    A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabred

    YüksekCVSS 8,8İstismar yokEPSS %1

    afterlogic · aurora files3 Eki 2023

  • CVE-2019-16238
    24İzleyin

    Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the admin

    OrtaCVSS 6,1İstismar yokEPSS %1

    afterlogic · aurora12 Eyl 2019

  • CVE-2019-19129
    24İzleyin

    Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name.

    OrtaCVSS 6,1İstismar yokEPSS %1

    afterlogic · aurora26 Kas 2019

  • CVE-2008-0333
    23İzleyin

    Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    afterlogic · mailbee webmail pro17 Oca 2008

  • CVE-2017-14597
    19İzleyin

    AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addi

    OrtaCVSS 4,8İstismar yokEPSS %1

    afterlogic · aurora19 Eyl 2017

  • CVE-2007-5290
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.

    OrtaCVSS 4,3Kavram kanıtıEPSS %4

    afterlogic · mailbee webmail9 Eki 2007

  • CVE-2008-0631
    18İzleyin

    Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files via the SaveToDisk m

    OrtaCVSS 4,3Kavram kanıtıEPSS %4

    afterlogic · mailbee objects6 Şub 2008

  • CVE-2007-2061
    18İzleyin

    Cross-site scripting (XSS) vulnerability in check_login.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrar

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    afterlogic · mailbee webmail17 Nis 2007

  • CVE-2009-4743
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attack

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    afterlogic · webmail pro26 Mar 2010

  • CVE-2012-2587
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arbitrary web script or

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    afterlogic · mailsuite pro12 Ağu 2012