Vulnerabilities

TI-2020-10946 CVE-2020-13972 · GHSA-x6cq-q3vp-9358

Enghouse Web Chat 6.2.284.34 allows XSS.

LOW 28

Enghouse Web Chat 6.2.284.34 allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2020-09-03 No fix listed CWE-79

TI-2019-12639 CVE-2019-16951 · GHSA-g3cx-px6h-qw53

LOW 26

A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00952 Published 2019-11-13 No fix listed CWE-829

TI-2019-12638 CVE-2019-16950 · GHSA-rwg3-j964-vj64

LOW 28

An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2019-11-13 No fix listed CWE-79

TI-2019-12637 CVE-2019-16949 · GHSA-3xcg-m3v5-m392

LOW 30

An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00783 Published 2019-11-13 No fix listed CWE-20

TI-2019-12636 CVE-2019-16948 · GHSA-v8v6-2chv-gcgp

MEDIUM 45

An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01335 Published 2019-11-13 No fix listed CWE-918