Egain

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Egain records in CISA KEV

No Egain vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Chat · all components

TI-2019-10425 CVE-2019-13976 · GHSA-8j8r-4m43-6442

MEDIUM 46

eGain Chat 15.0.3 allows unrestricted file upload.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01736 Published 2019-09-04 No fix listed CWE-434

TI-2020-12560 CVE-2020-15948 · GHSA-hcff-f49j-c4pq

LOW 29

eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00912 Published 2021-07-28 No fix listed CWE-79

TI-2019-10424 CVE-2019-13975 · GHSA-pmv2-xr2g-m6j5

LOW 29

eGain Chat 15.0.3 allows HTML Injection.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00857 Published 2019-09-04 No fix listed CWE-79