Enghouse

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Enghouse records in CISA KEV

No Enghouse vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Web Chat · all components

TI-2019-12636 CVE-2019-16948 · GHSA-v8v6-2chv-gcgp

MEDIUM 45

An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01335 Published 2019-11-13 No fix listed CWE-918

TI-2019-12637 CVE-2019-16949 · GHSA-3xcg-m3v5-m392

LOW 30

An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00783 Published 2019-11-13 No fix listed CWE-20

TI-2020-10946 CVE-2020-13972 · GHSA-x6cq-q3vp-9358

LOW 28

Enghouse Web Chat 6.2.284.34 allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2020-09-03 No fix listed CWE-79

TI-2019-12638 CVE-2019-16950 · GHSA-rwg3-j964-vj64

LOW 28

An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2019-11-13 No fix listed CWE-79

TI-2019-12639 CVE-2019-16951 · GHSA-g3cx-px6h-qw53

LOW 26

A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00952 Published 2019-11-13 No fix listed CWE-829