Lucene search
HistoryApr 11, 2003 - 4:00 a.m.
CVE-2002-1434
cve-2002-1434
cross-site scripting
xss
kerio mailserver
web mail
remote attack
5.9 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.1%
Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs.
Affected configurations
Node
keriokerio_mailserverMatch5.0
ORkeriokerio_mailserverMatch5.1
ORkeriokerio_mailserverMatch5.1.1
Related
nvd
nvd
CVE-2002-1434
2003-04-11 04:00:00
cvelist
cvelist
CVE-2002-1434
2003-03-18 05:00:00
nessus
nessus
Kerio WebMail < 5.7.7 Multiple Vulnerabilities
2003-06-18 00:00:00
openvas
openvas
Kerio WebMail < 5.7.7 Multiple Vulnerabilities
2008-10-24 00:00:00
Kerio WebMail v5 multiple flaws
2008-10-24 00:00:00
5.9 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.1%
Related for CVE-2002-1434