Vendors / Afterlogic Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Afterlogic records in CISA KEV No Afterlogic vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 52
An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0711 · Published 2021-03-04 · No fix listed CWE-22
Priority MEDIUM 50
An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.16899 · Published 2021-03-07 · No fix listed CWE-22
Priority LOW 29
Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00802 · Published 2019-11-26 · No fix listed CWE-79
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) HistoryStorageObjectName…
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01524 · Published 2010-03-26 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 10 0 0
THREATIST.IORead the docs