Known Vulnerabilities for products from Egain
Listed below are 4 of the newest known vulnerabilities associated with the vendor "Egain".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-15948 json | eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field. | 6.1 - MEDIUM | 2021-07-30 | 2021-08-03 |
| CVE-2019-17123 json | The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are ... | 7.5 - HIGH | 2019-12-13 | 2021-07-21 |
| CVE-2019-13976 json | eGain Chat 15.0.3 allows unrestricted file upload. | 9.8 - CRITICAL | 2019-09-04 | 2023-11-07 |
| CVE-2019-13975 json | eGain Chat 15.0.3 allows HTML Injection. | 6.1 - MEDIUM | 2019-09-04 | 2023-11-07 |