VulnerabilityModified
CVE-2012-2591
Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) From or (2) Date field in an email.
MEDIUM 4.3EPSS 2.01%
Does this matter?
Lower severity and a low EPSS score (2.01%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) From or (2) Date field in an email.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 2.01% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- emailarchitect/emailarchitect email server
- Source
- cret@cert.org
References
- http://osvdb.org/84520
- http://packetstormsecurity.org/files/115354/EmailArchitect-Enterprise-Email-Server-10.0-Cross-Site-Scripting.htmlExploit
- http://secunia.com/advisories/50203
- http://www.exploit-db.com/exploits/20349Exploit
- http://www.securityfocus.com/bid/54896Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77514
- http://osvdb.org/84520
- http://packetstormsecurity.org/files/115354/EmailArchitect-Enterprise-Email-Server-10.0-Cross-Site-Scripting.htmlExploit
- http://secunia.com/advisories/50203
- http://www.exploit-db.com/exploits/20349Exploit
- http://www.securityfocus.com/bid/54896Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77514
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.