Afterlogic

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Afterlogic records in CISA KEV

No Afterlogic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aurora 5 records MEDIUM Webmail Pro 4 records MEDIUM Mailbee Webmail 2 records LOW Aurora Files 1 record HIGH Mailbee Objects 1 record LOW Mailbee Webmail Pro 1 record LOW Mailsuite Pro 1 record LOW Webmail 1 record LOW

Records

1 record in Webmail · all components

TI-2017-10698 CVE-2017-14597 · GHSA-5qgj-c6mc-6chj

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field…

LOW 23

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00516 Published 2017-09-19 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	10
Low	0
No CVSS	0