CVE-2012-0389

Exploit

EPSS 8.42%
Veröffentlicht 24.01.2012 18:55:01
Zuletzt bearbeitet 16.06.2026 23:37:11
Erkennungen
Login

Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 13

NVD 159 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mailenable ≫ Mailenable Update - Edition pro Version <= 4.26

Mailenable ≫ Mailenable Version 1.2 Edition professional

Mailenable ≫ Mailenable Version 1.2a Edition professional

Mailenable ≫ Mailenable Version 1.5 Edition professional

Mailenable ≫ Mailenable Version 1.6 Edition professional

Mailenable ≫ Mailenable Version 1.7 Edition professional

Mailenable ≫ Mailenable Version 1.17 Edition professional

Mailenable ≫ Mailenable Version 1.18 Edition professional

Mailenable ≫ Mailenable Version 1.19 Edition professional

Mailenable ≫ Mailenable Version 1.51 Edition professional

Mailenable ≫ Mailenable Version 1.52 Edition professional

Mailenable ≫ Mailenable Version 1.53 Edition professional

Mailenable ≫ Mailenable Version 1.54 Edition professional

Mailenable ≫ Mailenable Version 1.70 Edition professional

Mailenable ≫ Mailenable Version 1.71 Edition professional

Mailenable ≫ Mailenable Version 1.72 Edition professional

Mailenable ≫ Mailenable Version 1.73 Edition professional

Mailenable ≫ Mailenable Version 1.74 Edition professional

Mailenable ≫ Mailenable Version 1.75 Edition professional

Mailenable ≫ Mailenable Version 1.76 Edition professional

Mailenable ≫ Mailenable Version 1.77 Edition professional

Mailenable ≫ Mailenable Version 1.78 Edition professional

Mailenable ≫ Mailenable Version 1.79 Edition professional

Mailenable ≫ Mailenable Version 3.0 Update - Edition pro

Mailenable ≫ Mailenable Version 3.01 Update - Edition pro

Mailenable ≫ Mailenable Version 3.02 Update - Edition pro

Mailenable ≫ Mailenable Version 3.03 Update - Edition pro

Mailenable ≫ Mailenable Version 3.04 Update - Edition pro

Mailenable ≫ Mailenable Version 3.5 Update - Edition pro

Mailenable ≫ Mailenable Version 3.6 Update - Edition pro

Mailenable ≫ Mailenable Version 3.10 Update - Edition pro

Mailenable ≫ Mailenable Version 3.11 Update - Edition pro

Mailenable ≫ Mailenable Version 3.12 Update - Edition pro

Mailenable ≫ Mailenable Version 3.13 Update - Edition pro

Mailenable ≫ Mailenable Version 3.14 Update - Edition pro

Mailenable ≫ Mailenable Version 3.51 Update - Edition pro

Mailenable ≫ Mailenable Version 3.52 Edition professional

Mailenable ≫ Mailenable Version 3.52 Update - Edition pro

Mailenable ≫ Mailenable Version 3.53 Update - Edition pro

Mailenable ≫ Mailenable Version 3.61 Update - Edition pro

Mailenable ≫ Mailenable Version 3.62 Update - Edition pro

Mailenable ≫ Mailenable Version 3.63 Update - Edition pro

Mailenable ≫ Mailenable Version 4.0 Update - Edition pro

Mailenable ≫ Mailenable Version 4.1 Update - Edition pro

Mailenable ≫ Mailenable Version 4.01 Update - Edition pro

Mailenable ≫ Mailenable Version 4.11 Update - Edition pro

Mailenable ≫ Mailenable Version 4.12 Update - Edition pro

Mailenable ≫ Mailenable Version 4.13 Update - Edition pro

Mailenable ≫ Mailenable Version 4.14 Update - Edition pro

Mailenable ≫ Mailenable Version 4.15 Update - Edition pro

Mailenable ≫ Mailenable Version 4.16 Update - Edition pro

Mailenable ≫ Mailenable Version 4.17 Update - Edition pro

Mailenable ≫ Mailenable Version 4.22 Update - Edition pro

Mailenable ≫ Mailenable Version 4.23 Update - Edition pro

Mailenable ≫ Mailenable Version 4.24 Update - Edition pro

Mailenable ≫ Mailenable Version 4.25 Update - Edition pro

Mailenable ≫ Mailenable Update - Edition enterprise Version <= 4.26

Mailenable ≫ Mailenable Version 1.00 Edition enterprise

Mailenable ≫ Mailenable Version 1.1 Edition enterprise

Mailenable ≫ Mailenable Version 1.01 Edition enterprise

Mailenable ≫ Mailenable Version 1.02 Edition enterprise

Mailenable ≫ Mailenable Version 1.2 Edition enterprise

Mailenable ≫ Mailenable Version 1.03 Edition enterprise

Mailenable ≫ Mailenable Version 1.04 Edition enterprise

Mailenable ≫ Mailenable Version 1.21 Edition enterprise

Mailenable ≫ Mailenable Version 1.22 Edition enterprise

Mailenable ≫ Mailenable Version 1.23 Edition enterprise

Mailenable ≫ Mailenable Version 1.24 Edition enterprise

Mailenable ≫ Mailenable Version 1.25 Edition enterprise

Mailenable ≫ Mailenable Version 1.26 Edition enterprise

Mailenable ≫ Mailenable Version 3.0 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.01 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.02 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.03 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.04 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.5 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.6 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.10 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.11 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.12 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.13 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.14 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.51 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.52 Edition enterprise

Mailenable ≫ Mailenable Version 3.52 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.53 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.61 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.62 Update - Edition enterprise

Mailenable ≫ Mailenable Version 3.63 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.0 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.01 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.1 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.11 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.12 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.13 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.14 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.15 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.16 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.17 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.22 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.23 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.24 Update - Edition enterprise

Mailenable ≫ Mailenable Version 4.25 Update - Edition enterprise

Mailenable ≫ Mailenable Edition premium Version <= 4.26

Mailenable ≫ Mailenable Version 4.1 Edition premium

Mailenable ≫ Mailenable Version 4.2 Edition premium

Mailenable ≫ Mailenable Version 4.21 Edition premium

Mailenable ≫ Mailenable Version 4.22 Edition premium

Mailenable ≫ Mailenable Version 4.23 Edition premium

Mailenable ≫ Mailenable Version 4.24 Edition premium

Mailenable ≫ Mailenable Version 4.25 Edition premium

Mailenable ≫ Mailenable Version 5.0 Edition professional

Mailenable ≫ Mailenable Version 5.01 Edition professional

Mailenable ≫ Mailenable Version 5.02 Edition professional

Mailenable ≫ Mailenable Version 5.03 Edition professional

Mailenable ≫ Mailenable Version 5.04 Edition professional

Mailenable ≫ Mailenable Version 5.5 Edition professional

Mailenable ≫ Mailenable Version 5.05 Edition professional

Mailenable ≫ Mailenable Version 5.06 Edition professional

Mailenable ≫ Mailenable Version 5.07 Edition professional

Mailenable ≫ Mailenable Version 5.10 Edition professional

Mailenable ≫ Mailenable Version 5.11 Edition professional

Mailenable ≫ Mailenable Version 5.51 Edition professional

Mailenable ≫ Mailenable Version 5.52 Edition professional

Mailenable ≫ Mailenable Version 5.0 Edition enterprise

Mailenable ≫ Mailenable Version 5.01 Edition enterprise

Mailenable ≫ Mailenable Version 5.02 Edition enterprise

Mailenable ≫ Mailenable Version 5.03 Edition enterprise

Mailenable ≫ Mailenable Version 5.04 Edition enterprise

Mailenable ≫ Mailenable Version 5.5 Edition enterprise

Mailenable ≫ Mailenable Version 5.05 Edition enterprise

Mailenable ≫ Mailenable Version 5.06 Edition enterprise

Mailenable ≫ Mailenable Version 5.07 Edition enterprise

Mailenable ≫ Mailenable Version 5.10 Edition enterprise

Mailenable ≫ Mailenable Version 5.11 Edition enterprise

Mailenable ≫ Mailenable Version 5.51 Edition enterprise

Mailenable ≫ Mailenable Version 5.52 Edition enterprise

Mailenable ≫ Mailenable Version 5.0 Edition premium

Mailenable ≫ Mailenable Version 5.01 Edition premium

Mailenable ≫ Mailenable Version 5.02 Edition premium

Mailenable ≫ Mailenable Version 5.03 Edition premium

Mailenable ≫ Mailenable Version 5.04 Edition premium

Mailenable ≫ Mailenable Version 5.05 Edition premium

Mailenable ≫ Mailenable Version 5.5 Edition premium

Mailenable ≫ Mailenable Version 5.06 Edition premium

Mailenable ≫ Mailenable Version 5.07 Edition premium

Mailenable ≫ Mailenable Version 5.10 Edition premium

Mailenable ≫ Mailenable Version 5.11 Edition premium

Mailenable ≫ Mailenable Version 5.51 Edition premium

Mailenable ≫ Mailenable Version 5.52 Edition premium

Mailenable ≫ Mailenable Version 6.0 Edition professional

Mailenable ≫ Mailenable Version 6.01 Edition professional

Mailenable ≫ Mailenable Version 6.02 Edition professional

Mailenable ≫ Mailenable Version 6.0 Edition enterprise

Mailenable ≫ Mailenable Version 6.01 Edition enterprise

Mailenable ≫ Mailenable Version 6.02 Edition enterprise

Mailenable ≫ Mailenable Version 6.0 Edition premium

Mailenable ≫ Mailenable Version 6.01 Edition premium

Mailenable ≫ Mailenable Version 6.02 Edition premium

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	8.42%	0.943

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://archives.neohapsis.com/archives/bugtraq/2012-01/0090.html

Exploit

http://osvdb.org/78242

http://secunia.com/advisories/47518

Vendor Advisory

http://secunia.com/advisories/47562

Vendor Advisory

http://www.exploit-db.com/exploits/18447

http://www.mailenable.com/kb/Content/Article.asp?ID=me020567

Patch

Vendor Advisory

http://www.nerv.fi/CVE-2012-0389.txt

Exploit

http://www.securityfocus.com/bid/51401

Exploit

http://www.securitytracker.com/id?1026519

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/72380

https://nvd.nist.gov/vuln/detail/CVE-2012-0389

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0389

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0389

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-0389