Enghouse Web Chat
5 CVEs affecting Enghouse Web Chat. Latest disclosed: 2020-09-03. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-16948 | Critical | 9.8 | 2019-11-13 | An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/… |
CVE-2019-16949 | Medium | 6.5 | 2019-11-13 | An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. A user is allowed to send an archive of their chat log to an email address specified at… |
CVE-2020-13972 | Medium | 6.1 | 2020-09-03 | Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displ… |
CVE-2019-16950 | Medium | 6.1 | 2019-11-13 | An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request allows for insertion of user-supplied Java… |
CVE-2019-16951 | Medium | 5.3 | 2019-11-13 | A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribute with one's own domain name. When the… |