CVE-2012-0389

CVSS V2 Medium 4.3 CVSS V3 None
Description
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.
Overview
  • CVE ID
  • CVE-2012-0389
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2012-01-24T18:55:01
  • Last Modified Date
  • 2017-08-29T01:30:55
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:mailenable:mailenable:*:-:pro:*:*:*:*:* 1 OR 4.26
cpe:2.3:a:mailenable:mailenable:1.2:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.2a:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.5:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.6:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.7:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.17:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.18:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.19:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.51:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.52:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.53:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.54:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.70:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.71:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.72:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.73:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.74:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.75:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.76:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.77:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.78:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.79:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.0:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.01:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.02:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.03:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.04:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.5:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.6:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.10:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.11:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.12:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.13:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.14:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.51:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.52:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.52:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.53:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.61:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.62:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.63:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.0:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.1:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.01:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.11:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.12:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.13:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.14:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.15:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.16:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.17:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.22:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.23:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.24:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.25:-:pro:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:*:-:enterprise:*:*:*:*:* 1 OR 4.26
cpe:2.3:a:mailenable:mailenable:1.00:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.1:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.01:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.02:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.2:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.03:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.04:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.21:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.22:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.23:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.24:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.25:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:1.26:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.0:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.01:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.02:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.03:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.04:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.5:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.6:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.10:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.11:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.12:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.13:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.14:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.51:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.52:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.52:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.53:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.61:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.62:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:3.63:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.0:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.01:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.1:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.11:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.12:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.13:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.14:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.15:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.16:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.17:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.22:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.23:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.24:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.25:-:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:*:*:premium:*:*:*:*:* 1 OR 4.26
cpe:2.3:a:mailenable:mailenable:4.1:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.2:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.21:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.22:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.23:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.24:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:4.25:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.0:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.01:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.02:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.03:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.04:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.5:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.05:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.06:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.07:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.10:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.11:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.51:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.52:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.0:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.01:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.02:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.03:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.04:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.5:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.05:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.06:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.07:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.10:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.11:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.51:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.52:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.0:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.01:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.02:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.03:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.04:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.05:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.5:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.06:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.07:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.10:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.11:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.51:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:5.52:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:6.0:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:6.01:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:6.02:*:professional:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:6.0:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:6.01:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:6.02:*:enterprise:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:6.0:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:6.01:*:premium:*:*:*:*:* 1 OR
cpe:2.3:a:mailenable:mailenable:6.02:*:premium:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:N/I:P/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • NONE
  • Base Score
  • 4.3
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://www.mailenable.com/kb/Content/Article.asp?ID=me020567 Patch Vendor Advisory
http://www.securitytracker.com/id?1026519 Exploit
http://secunia.com/advisories/47562 Vendor Advisory
http://osvdb.org/78242
http://www.securityfocus.com/bid/51401 Exploit
http://www.nerv.fi/CVE-2012-0389.txt Exploit
http://archives.neohapsis.com/archives/bugtraq/2012-01/0090.html Exploit
http://secunia.com/advisories/47518 Vendor Advisory
http://www.exploit-db.com/exploits/18447
https://exchange.xforce.ibmcloud.com/vulnerabilities/72380
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2012-0389
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0389
History
Created Old Value New Value Data Type Notes
2022-05-10 08:51:35 Added to TrackCVE