Approved changes feed: RSS · Atom

cpe:2.3:a:communigate:communigate_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCommunigate (0ea5d814-64b9-5391-b0a2-56463929e761)
ProductCommunigate Pro (91ce0e5a-34ec-5d79-9be3-51f6b7e846e5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-16962 vulnerable 2026-06-08 05:09:07.734645 Details available
The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via (1) the location or details field of a Google Calendar invitation, (2) a crafted Outlook.com calendar (aka Hotmail Calendar) invitation, (3) e-mail granting access to a directory that has JavaScript in its name, (4) JavaScript in a note name, (5) JavaScript in a task name, or (6) HTML e-mail that is mishandled in the Inbox component.
Published: 2017-11-27T10:00:00.000Z
Updated: 2024-08-05T20:43:57.828Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.