← Back

Scalix

scalix

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Web Access
web_access
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-9360
1Scalix
1Web Access
May 6, 2026
Dec 10, 2014
N/A· v4
N/A· v3
6.4 MEDIUM· v2
XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request.
CVE-2014-9352
1Scalix
1Web Access
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.