Afterlogic 漏洞

时间轴

类型

Not Defined12

产品

AfterLogic Aurora5
AfterLogic WebMail Pro3
Afterlogic Aurora Files1
AfterLogic Webmail Pro1
AfterLogic Webmail1

修正

Official Fix1
Temporary Fix0
Workaround0
Unavailable2
Not Defined9

易受攻击性

High3
Functional0
Proof-of-Concept3
Unproven0
Not Defined6

访问向量

Not Defined0
Physical0
Local0
Adjacent3
Network9

身份验证

Not Defined0
High1
Low3
None8

用户交互

Not Defined0
Required7
None5

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤54
≤64
≤71
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤55
≤63
≤71
≤82
≤90
≤100

VulDB

≤10
≤20
≤31
≤40
≤56
≤65
≤70
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤51
≤60
≤72
≤81
≤91
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k2
<2k8
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k12
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (9): Aurora (5), Aurora Files (1), MailBee Objects (1), MailBee WebMail (2), MailBee WebMail Pro (1), MailSuite Pro (1), WebMail Pro (3), Webmail (1), Webmail Pro (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2023-10-047.17.1Afterlogic Aurora Files sabredav File 权限升级未知Not DefinedNot Defined0.001300.05CVE-2023-43176
2021-03-076.56.5AfterLogic Aurora/WebMail Pro settings.xml 目录遍历未知Not DefinedNot Defined0.219690.02CVE-2021-26294
2021-03-057.67.6AfterLogic Aurora/WebMail Pro DAV DAVServer.php 目录遍历未知Not DefinedNot Defined0.002900.02CVE-2021-26293
2019-11-265.25.2AfterLogic Webmail Pro/Aurora Attachment Name Stored 跨网站脚本未知Not DefinedNot Defined0.000760.00CVE-2019-19129
2019-09-125.25.2AfterLogic Aurora 跨网站脚本未知Not DefinedNot Defined0.000820.03CVE-2019-16238
2017-09-193.63.6AfterLogic Webmail/Aurora ajax.php 跨网站脚本未知Not DefinedNot Defined0.000510.03CVE-2017-14597
2012-08-124.34.1AfterLogic MailSuite Pro 跨网站脚本未知Proof-of-ConceptNot Defined0.001050.00CVE-2012-2587
2009-10-054.34.1AfterLogic WebMail Pro history-storage.aspx 跨网站脚本未知Proof-of-ConceptNot Defined0.002440.00CVE-2009-4743
2008-02-065.35.0Afterlogic MailBee Objects ActiveX Control mailbee.dll 权限升级未知Proof-of-ConceptNot Defined0.011590.00CVE-2008-0631
2008-01-175.35.1AfterLogic MailBee WebMail Pro download_view_attachment.aspx 目录遍历未知HighOfficial Fix0.008090.00CVE-2008-0333

2 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 2 results.

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!