Lucene search
HistoryAug 07, 2003 - 4:00 a.m.
CVE-2003-0488
cve-2003-0488
kerio mailserver
xss
cross-site scripting
vulnerabilities
nvd
6.1 Medium
AI Score
Confidence
High
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.025 Low
EPSS
Percentile
90.2%
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kerio:kerio_mailserver | kerio kerio mailserver | eq | 5.6.3 |
Related
cvelist
cvelist
CVE-2003-0488
2003-06-28 04:00:00
nessus
nessus
Kerio WebMail < 5.7.7 Multiple Vulnerabilities
2003-06-18 00:00:00
openvas
openvas
Kerio WebMail < 5.7.7 Multiple Vulnerabilities
2008-10-24 00:00:00
Kerio WebMail v5 multiple flaws
2008-10-24 00:00:00
6.1 Medium
AI Score
Confidence
High
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.025 Low
EPSS
Percentile
90.2%
Related for CVE-2003-0488