VULNERABILITY INTELLIGENCE

CVE-2019-12926

CVSS score8.8 HIGH

EPSS probability0.92%

CISA KEVNot currently listed

Published2019-07-08

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain access to areas within the application for which the accounts used were supposed to have insufficient access.

Weakness classification

CWE-862: Missing Authorization

Primary references

cve@mitre.org — Release Notes, Vendor Advisory
cve@mitre.org — Release Notes, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Third Party Advisory