Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Egain Subscribe
Filtered by product Mail
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-17123 1 Egain 1 Mail 2021-07-21 5.0 MEDIUM 7.5 HIGH
The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as demonstrated by fromName header injection with a %0a or %0d character. (Also, the message parameter can have initial HTML comment characters.)