Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2020-15948

eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Egain
Products
Chat
CVE-2019-17123

The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as demonstrated by fromName header injection with a %0a or %0d character. (Also, the message parameter can have initial HTML comment characters.)

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Egain
Products
Mail
CVE-2019-13976

eGain Chat 15.0.3 allows unrestricted file upload.

CVSS 3.0 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Egain
Products
Chat
CVE-2019-13975

eGain Chat 15.0.3 allows HTML Injection.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Egain
Products
Chat