Vulnerabilities

TI-2014-07593 CVE-2014-9360 · GHSA-pvcp-3wfq-3hf4

XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and…

LOW 31

XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01419 Published 2014-12-10 No fix listed

TI-2014-07586 CVE-2014-9352 · GHSA-whf2-4g7v-9wcm

Cross-site scripting (XSS) vulnerability in the mail administration login panel in Scalix…

LOW 22

Cross-site scripting (XSS) vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2014-12-09 No fix listed CWE-79

Vulnerabilities

Filters

XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and…

Cross-site scripting (XSS) vulnerability in the mail administration login panel in Scalix…