CVE-2019-17123

The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields to /system/ws/v11/ss/email are mishandled, as demonstrated by fromName header injection with a %0a or %0d character. Also, the message parameter can have initial HTML comment characters...

CVE-2019-17123

The CVE-2019-17123 entry concerns the eGain Web Email API 11+ where spoofed messages are possible due to improper handling of the fromName and message fields used in /system/ws/v11/ss/email. The root cause is mishandling of fromName with header injection via %0a/%0d and the message parameter allo...

CVE-2019-13976

eGain Chat 15.0.3 allows unrestricted file upload...

CVE-2019-13975

eGain Chat 15.0.3 allows HTML Injection...

CVE-2019-13975

eGain Chat 15.0.3 allows HTML Injection...

CVE-2019-13976

eGain Chat 15.0.3 allows unrestricted file upload...

Design/Logic Flaw

eGain Chat 15.0.3 allows HTML Injection...

Unrestricted file upload

eGain Chat 15.0.3 allows unrestricted file upload...

CVE-2019-13976

CVE-2019-13976 : In eGain Chat 15.0.3, an unrestricted file upload vulnerability is present. The vulnerability affects the product/component as stated, with CVSSv2/3 base scores indicating HIGH to CRITICAL impact (network-based with low attack complexity and no authentication). The available docu...

CVE-2019-13976

eGain Chat 15.0.3 allows unrestricted file upload...

CVE-2019-13975

eGain Chat 15.0.3 allows HTML Injection...

CVE-2019-13975

CVE-2019-13975 : The supplied connected documents identify an HTML Injection vulnerability in eGain Chat 15.0.3 . The CVSS details indicate a network-accessible issue with low to moderate impact: base CVSS v3.0 score 6.1 (vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), with no availability...