CVE-2019-12927

MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks

published July 8, 2019

CVSS
—
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00867 · 58.3th percentile
Published
2019-07-08T21:04Z
EPSS history
Timeline
  • 08 JUL 21:04Z
    MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks
    cvelistv5