Mailenable 漏洞

时间轴

类型

Mail Server Software16

产品

MailEnable Enterprise Premium6
MailEnable Web Mail4
MailEnable Professional Edition4
MailEnable Enterprise Edition4
Mailenable Professional Edition2

修正

Official Fix6
Temporary Fix0
Workaround0
Unavailable0
Not Defined10

易受攻击性

High0
Functional0
Proof-of-Concept8
Unproven0
Not Defined8

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network16

身份验证

Not Defined0
High0
Low4
None12

用户交互

Not Defined0
Required6
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤66
≤74
≤86
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤68
≤72
≤84
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤52
≤64
≤78
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤94
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k6
<2k6
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k16
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (7): Enterprise Edition (5), Enterprise Premium (5), Imapd (1), Professional (1), Professional Edition (5), Standard (1), Web Mail (2)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2019-07-085.25.2MailEnable Enterprise Premium Stored 跨网站脚本Mail Server SoftwareNot DefinedNot Defined0.000920.00CVE-2019-12927
2019-07-087.57.5MailEnable Enterprise Premium Access Control 权限升级Mail Server SoftwareNot DefinedNot Defined0.000760.02CVE-2019-12926
2019-07-087.27.2MailEnable Enterprise Premium 目录遍历Mail Server SoftwareNot DefinedNot Defined0.000610.02CVE-2019-12925
2019-07-088.58.5MailEnable Enterprise Premium XML Data XML External EntityMail Server SoftwareNot DefinedNot Defined0.002240.02CVE-2019-12924
2019-07-085.45.4MailEnable Enterprise Premium 跨网站请求伪造Mail Server SoftwareNot DefinedNot Defined0.000530.00CVE-2019-12923
2007-02-146.35.7MailEnable Web Mail list.asp 跨网站脚本Mail Server SoftwareProof-of-ConceptOfficial Fix0.010030.00CVE-2007-0651
2007-02-146.35.7MailEnable Web Mail right.asp 跨网站脚本Mail Server SoftwareProof-of-ConceptOfficial Fix0.010030.03CVE-2007-0651
2005-05-315.35.3MailEnable Professional 拒绝服务Mail Server SoftwareNot DefinedNot Defined0.003260.00CVE-2005-1781
2005-05-0210.010.0MailEnable Imapd Login meimap.exe 内存损坏Mail Server SoftwareNot DefinedNot Defined0.003370.00CVE-2005-1015
2005-05-027.36.9MailEnable Professional Edition/Enterprise Edition IMAP Service 内存损坏Mail Server SoftwareProof-of-ConceptNot Defined0.064850.00CVE-2005-1014

5 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 5 results.

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!