MailEnable vulnerability warning CVE-2019-12923~CVE-2019-12927-the vulnerability warning-the black bar safety net

Recently, the mail server MailEnable broke a set of vulnerabilities, the first time for tracking and analysis of early warning. The study found that, using the set of vulnerabilities that an attacker can achieve the user data CRUD, the file is read and a portion of the override operation...

CVE-2019-12927

MailEnable Enterprise Premium 10.23 is affected by stored and reflected XSS due to session cookie not being HttpOnly, enabling possible session hijack when a user opens a malicious email. Affected version: 10.23; fixes are available in 10.25 and later. Remediation: upgrade to the security patch (...