Vendors / Afterlogic Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Afterlogic records in CISA KEV No Afterlogic vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 52
An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0711 · Published 2021-03-04 · No fix listed CWE-22
Priority MEDIUM 50
An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.16899 · Published 2021-03-07 · No fix listed CWE-22
Priority LOW 29
Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00802 · Published 2019-11-26 · No fix listed CWE-79
Priority LOW 29
Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00934 · Published 2019-09-12 · No fix listed CWE-79
Priority LOW 23
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain.
CVSS 3.0 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00516 · Published 2017-09-19 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 10 0 0
THREATIST.IORead the docs