PT-2021-9847 · Egain · Egain Chat

Published 2021-07-28 · Updated 2021-08-03 · CVE-2020-15948

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions eGain Chat version 15.5.5

Description The issue allows for XSS via the full name field, also known as the Name field.

Recommendations For version 15.5.5, ensure proper validation and sanitization of user input in the full name field to prevent XSS attacks. As a temporary workaround, consider restricting user input in the Name field until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-15948

Affected Products

Egain Chat

References · 3

• 🔥 http://packetstormsecurity.com/files/163687/eGain-Chat-15.5.5-Cross-Site-Scripting.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-15948 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15948 · Security Note