Aurora Security Vulnerabilities and Issues — Aurora CVE List

Lucene search

AfterlogicAurora

2 matches found

CVE•added 2019/09/12 4:15 p.m.•90 views

CVE-2019-16238

Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login.

6.1CVSS6AI score0.0021EPSS

CVE•added 2019/11/26 4:15 p.m.•34 views

CVE-2019-19129

Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name.

6.1CVSS5.9AI score0.0024EPSS