Security Advisory

CVE-2019-12927

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-07-08 21:04:35

Last updated 2024-08-04 23:32:55

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulnerability.

← Browse all CVEs View on cve.org ↗