Egain

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Egain records in CISA KEV

No Egain vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Chat 3 records MEDIUM Mail 1 record LOW

Records

1 record in Mail · all components

TI-2019-12776 CVE-2019-17123 · GHSA-pmmq-6pp3-rf2g

The eGain Web Email API 11+ allows spoofed messages because the fromName and message…

LOW 35

The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as demonstrated by fromName header injection with a %0a or %0d character.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00984 Published 2019-12-13 No fix listed CWE-74

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0