Vulnerabilities

TI-2018-13162 CVE-2018-18621 · GHSA-m987-jp5m-qvxh

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which…

LOW 29

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link (in .txt format) is modified and then renamed with a .html or .wssp extens…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01058 Published 2018-10-24 No fix listed CWE-79

TI-2017-12494 CVE-2017-16962 · GHSA-3cqh-3p38-9v4j

The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1…

LOW 31

The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via (1) the location or details field of a Google Calendar invitation, (2) a crafted Outlook.com calen…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02186 Published 2017-11-27 No fix listed CWE-79

TI-2006-00549 CVE-2006-0566 · GHSA-g527-324c-34j6

The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause…

LOW 27

The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial of service (application crash) via LDAP messages that contain Distinguished Names (DN) fields with a large number of eleme…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02272 Published 2006-02-06 No fix listed

Vulnerabilities

Filters

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which…

The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1…

The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause…