Security Scalix Web Access 11.4.6.12377 / 12.2.0.14697 XXE Injection / XSS October 31, 2014 007admin Leave a comment Scalix Web Access versions 11.4.6.12377 and 12.2.0.14697 suffer from cross site scripting and XXE injection vulnerabilities.