Communigate

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-18621 Oct 24, 22:29 MEDIUM POC This Month

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto!. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Communigate Pro Communigate

NVD

CVSS 3.0

6.1

EPSS

1.1%

CVE-2017-16962 Nov 27, 10:29 MEDIUM POC This Month

The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via (1) the location or details field of a Google Calendar invitation, (2) a. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Google Microsoft Communigate Pro Communigate

NVD Exploit-DB

CVSS 3.0

6.1

EPSS

0.3%

CVE-2018-18621

EPSS 1% CVSS 6.1

MEDIUM POC This Month

XSS Communigate Pro Communigate

NVD

CVE-2017-16962

EPSS 0% CVSS 6.1

MEDIUM POC This Month

XSS Google Microsoft +2

NVD Exploit-DB