https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 09:19:15 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-00501 cnvd-2020-00501 https://cve.radiocsirt.org/vuln/cnvd-2020-00501 https://cve.radiocsirt.org/vuln/euvd-2026-58039 EUVD-2026-58039 https://cve.radiocsirt.org/vuln/euvd-2026-58039 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16948 <p>An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network (as opposed to what general web traffic would see on the product&#39;s host). The response from open ports is different than from closed ports. The product does not allow one to change the protocol: anything except http(s) will throw an error; however, it is the type of error that allows one to determine if a port is open or not.</p> <p>An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network (as opposed to what general web traffic would see on the product&#39;s host). The response from open ports is different than from closed ports. The product does not allow one to change the protocol: anything except http(s) will throw an error; however, it is the type of error that allows one to determine if a port is open or not.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-16948 https://cve.radiocsirt.org/vuln/ghsa-v8v6-2chv-gcgp <p>An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network (as opposed to what general web traffic would see on the product&#39;s host). The response from open ports is different than from closed ports. The product does not allow one to change the protocol: anything except http(s) will throw an error; however, it is the type of error that allows one to determine if a port is open or not.</p> <p>An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network (as opposed to what general web traffic would see on the product&#39;s host). The response from open ports is different than from closed ports. The product does not allow one to change the protocol: anything except http(s) will throw an error; however, it is the type of error that allows one to determine if a port is open or not.</p> https://cve.radiocsirt.org/vuln/ghsa-v8v6-2chv-gcgp https://cve.radiocsirt.org/vuln/gsd-2019-16948 gsd-2019-16948 https://cve.radiocsirt.org/vuln/gsd-2019-16948