critical10.0
CVE-2015-9280
MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter.
Impact
MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mailenable | Mailenable | before 8.60 |
Weakness classification
References
- NVD record
- CVE.org record
- https://web.archive.org/web/20150329173628/http://www.mailenable.com/Standard-ReleaseNotes.txt
- https://www.nccgroup.trust/globalassets/our-research/uk/technical-advisories/2015/technical-advisory-multiple-vulnerabilities-in-mailenable.pdf
- https://www.nccgroup.trust/uk/our-research/multiple-vulnerabilities-in-mailenable/
- https://web.archive.org/web/20150329173628/http://www.mailenable.com/Standard-ReleaseNotes.txt
- https://www.nccgroup.trust/globalassets/our-research/uk/technical-advisories/2015/technical-advisory-multiple-vulnerabilities-in-mailenable.pdf
- https://www.nccgroup.trust/uk/our-research/multiple-vulnerabilities-in-mailenable/