Lucene search
MitreCVE-2012-0389HistoryJan 24, 2012 - 6:55 p.m.
CVE-2012-0389
2012-01-2418:55:01
CWE-79
mitre
web.nvd.nist.gov
42
mailenable
xss
vulnerability
forgottenpassword.aspx
nvd
cve-2012-0389
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.528
Percentile
97.6%
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.
Affected configurations
Node
mailenablemailenableRange≤4.26-pro
ORmailenablemailenableMatch1.2professional
ORmailenablemailenableMatch1.2aprofessional
ORmailenablemailenableMatch1.5professional
ORmailenablemailenableMatch1.6professional
ORmailenablemailenableMatch1.7professional
ORmailenablemailenableMatch1.17professional
ORmailenablemailenableMatch1.18professional
ORmailenablemailenableMatch1.19professional
ORmailenablemailenableMatch1.51professional
ORmailenablemailenableMatch1.52professional
ORmailenablemailenableMatch1.53professional
ORmailenablemailenableMatch1.54professional
ORmailenablemailenableMatch1.70professional
ORmailenablemailenableMatch1.71professional
ORmailenablemailenableMatch1.72professional
ORmailenablemailenableMatch1.73professional
ORmailenablemailenableMatch1.74professional
ORmailenablemailenableMatch1.75professional
ORmailenablemailenableMatch1.76professional
ORmailenablemailenableMatch1.77professional
ORmailenablemailenableMatch1.78professional
ORmailenablemailenableMatch1.79professional
ORmailenablemailenableMatch3.0-pro
ORmailenablemailenableMatch3.01-pro
ORmailenablemailenableMatch3.02-pro
ORmailenablemailenableMatch3.03-pro
ORmailenablemailenableMatch3.04-pro
ORmailenablemailenableMatch3.5-pro
ORmailenablemailenableMatch3.6-pro
ORmailenablemailenableMatch3.10-pro
ORmailenablemailenableMatch3.11-pro
ORmailenablemailenableMatch3.12-pro
ORmailenablemailenableMatch3.13-pro
ORmailenablemailenableMatch3.14-pro
ORmailenablemailenableMatch3.51-pro
ORmailenablemailenableMatch3.52professional
ORmailenablemailenableMatch3.52-pro
ORmailenablemailenableMatch3.53-pro
ORmailenablemailenableMatch3.61-pro
ORmailenablemailenableMatch3.62-pro
ORmailenablemailenableMatch3.63-pro
ORmailenablemailenableMatch4.0-pro
ORmailenablemailenableMatch4.1-pro
ORmailenablemailenableMatch4.01-pro
ORmailenablemailenableMatch4.11-pro
ORmailenablemailenableMatch4.12-pro
ORmailenablemailenableMatch4.13-pro
ORmailenablemailenableMatch4.14-pro
ORmailenablemailenableMatch4.15-pro
ORmailenablemailenableMatch4.16-pro
ORmailenablemailenableMatch4.17-pro
ORmailenablemailenableMatch4.22-pro
ORmailenablemailenableMatch4.23-pro
ORmailenablemailenableMatch4.24-pro
ORmailenablemailenableMatch4.25-pro
Node
mailenablemailenableRange≤4.26-enterprise
ORmailenablemailenableMatch1.00enterprise
ORmailenablemailenableMatch1.1enterprise
ORmailenablemailenableMatch1.01enterprise
ORmailenablemailenableMatch1.02enterprise
ORmailenablemailenableMatch1.2enterprise
ORmailenablemailenableMatch1.03enterprise
ORmailenablemailenableMatch1.04enterprise
ORmailenablemailenableMatch1.21enterprise
ORmailenablemailenableMatch1.22enterprise
ORmailenablemailenableMatch1.23enterprise
ORmailenablemailenableMatch1.24enterprise
ORmailenablemailenableMatch1.25enterprise
ORmailenablemailenableMatch1.26enterprise
ORmailenablemailenableMatch3.0-enterprise
ORmailenablemailenableMatch3.01-enterprise
ORmailenablemailenableMatch3.02-enterprise
ORmailenablemailenableMatch3.03-enterprise
ORmailenablemailenableMatch3.04-enterprise
ORmailenablemailenableMatch3.5-enterprise
ORmailenablemailenableMatch3.6-enterprise
ORmailenablemailenableMatch3.10-enterprise
ORmailenablemailenableMatch3.11-enterprise
ORmailenablemailenableMatch3.12-enterprise
ORmailenablemailenableMatch3.13-enterprise
ORmailenablemailenableMatch3.14-enterprise
ORmailenablemailenableMatch3.51-enterprise
ORmailenablemailenableMatch3.52enterprise
ORmailenablemailenableMatch3.52-enterprise
ORmailenablemailenableMatch3.53-enterprise
ORmailenablemailenableMatch3.61-enterprise
ORmailenablemailenableMatch3.62-enterprise
ORmailenablemailenableMatch3.63-enterprise
ORmailenablemailenableMatch4.0-enterprise
ORmailenablemailenableMatch4.01-enterprise
ORmailenablemailenableMatch4.1-enterprise
ORmailenablemailenableMatch4.11-enterprise
ORmailenablemailenableMatch4.12-enterprise
ORmailenablemailenableMatch4.13-enterprise
ORmailenablemailenableMatch4.14-enterprise
ORmailenablemailenableMatch4.15-enterprise
ORmailenablemailenableMatch4.16-enterprise
ORmailenablemailenableMatch4.17-enterprise
ORmailenablemailenableMatch4.22-enterprise
ORmailenablemailenableMatch4.23-enterprise
ORmailenablemailenableMatch4.24-enterprise
ORmailenablemailenableMatch4.25-enterprise
Node
mailenablemailenableRange≤4.26premium
ORmailenablemailenableMatch4.1premium
ORmailenablemailenableMatch4.2premium
ORmailenablemailenableMatch4.21premium
ORmailenablemailenableMatch4.22premium
ORmailenablemailenableMatch4.23premium
ORmailenablemailenableMatch4.24premium
ORmailenablemailenableMatch4.25premium
Node
mailenablemailenableMatch5.0professional
ORmailenablemailenableMatch5.01professional
ORmailenablemailenableMatch5.02professional
ORmailenablemailenableMatch5.03professional
ORmailenablemailenableMatch5.04professional
ORmailenablemailenableMatch5.5professional
ORmailenablemailenableMatch5.05professional
ORmailenablemailenableMatch5.06professional
ORmailenablemailenableMatch5.07professional
ORmailenablemailenableMatch5.10professional
ORmailenablemailenableMatch5.11professional
ORmailenablemailenableMatch5.51professional
ORmailenablemailenableMatch5.52professional
Node
mailenablemailenableMatch5.0enterprise
ORmailenablemailenableMatch5.01enterprise
ORmailenablemailenableMatch5.02enterprise
ORmailenablemailenableMatch5.03enterprise
ORmailenablemailenableMatch5.04enterprise
ORmailenablemailenableMatch5.5enterprise
ORmailenablemailenableMatch5.05enterprise
ORmailenablemailenableMatch5.06enterprise
ORmailenablemailenableMatch5.07enterprise
ORmailenablemailenableMatch5.10enterprise
ORmailenablemailenableMatch5.11enterprise
ORmailenablemailenableMatch5.51enterprise
ORmailenablemailenableMatch5.52enterprise
Node
mailenablemailenableMatch5.0premium
ORmailenablemailenableMatch5.01premium
ORmailenablemailenableMatch5.02premium
ORmailenablemailenableMatch5.03premium
ORmailenablemailenableMatch5.04premium
ORmailenablemailenableMatch5.05premium
ORmailenablemailenableMatch5.5premium
ORmailenablemailenableMatch5.06premium
ORmailenablemailenableMatch5.07premium
ORmailenablemailenableMatch5.10premium
ORmailenablemailenableMatch5.11premium
ORmailenablemailenableMatch5.51premium
ORmailenablemailenableMatch5.52premium
Node
mailenablemailenableMatch6.0professional
ORmailenablemailenableMatch6.01professional
ORmailenablemailenableMatch6.02professional
Node
mailenablemailenableMatch6.0enterprise
ORmailenablemailenableMatch6.01enterprise
ORmailenablemailenableMatch6.02enterprise
Node
mailenablemailenableMatch6.0premium
ORmailenablemailenableMatch6.01premium
ORmailenablemailenableMatch6.02premium
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mailenable | mailenable | 1.76 | cpe:/a:mailenable:mailenable:1.76::: |
| mailenable | mailenable | 3.02 | cpe:/a:mailenable:mailenable:3.02:-:: |
| mailenable | mailenable | 1.2a | cpe:/a:mailenable:mailenable:1.2a::: |
| mailenable | mailenable | 4.1 | cpe:/a:mailenable:mailenable:4.1:-:: |
| mailenable | mailenable | 4.12 | cpe:/a:mailenable:mailenable:4.12:-:: |
| mailenable | mailenable | 3.0 | cpe:/a:mailenable:mailenable:3.0:-:: |
| mailenable | mailenable | 3.5 | cpe:/a:mailenable:mailenable:3.5:-:: |
| mailenable | mailenable | 3.14 | cpe:/a:mailenable:mailenable:3.14:-:: |
| mailenable | mailenable | 1.5 | cpe:/a:mailenable:mailenable:1.5::: |
| mailenable | mailenable | 3.03 | cpe:/a:mailenable:mailenable:3.03:-:: |
References
archives.neohapsis.com/archives/bugtraq/2012-01/0090.html
osvdb.org/78242
secunia.com/advisories/47518
secunia.com/advisories/47562
www.exploit-db.com/exploits/18447
www.mailenable.com/kb/Content/Article.asp?ID=me020567
www.nerv.fi/CVE-2012-0389.txt
www.securityfocus.com/bid/51401
www.securitytracker.com/id?1026519
exchange.xforce.ibmcloud.com/vulnerabilities/72380
Related
seebug
seebug
MailEnable Webmail Cross-Site Scripting Vulnerability
2014-07-01 00:00:00
prion
prion
Cross site scripting
2012-01-24 18:55:00
openvas
openvas
MailEnable XSS Vulnerability (Jan 2012) - Active Check
2012-01-13 00:00:00
packetstorm
packetstorm
MailEnable Webmail Cross Site Scripting
2012-01-13 00:00:00
securityvulns
securityvulns
MailEnable crossite scripting
2012-01-16 00:00:00
nessus
nessus
MailEnable ForgottenPassword.aspx Username Parameter XSS
2012-06-19 00:00:00
nvd
nvd
CVE-2012-0389
2012-01-24 18:55:01
cvelist
cvelist
CVE-2012-0389
2012-01-24 18:00:00
exploitpack
exploitpack
MailEnable Webmail - Cross-Site Scripting
2012-01-13 00:00:00
exploitdb
exploitdb
MailEnable Webmail - Cross-Site Scripting
2012-01-13 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.528
Percentile
97.6%
Related for CVE-2012-0389