Lucene search
HistorySep 23, 2006 - 10:07 a.m.
CVE-2006-4952
neon webmail
java
vulnerability
remote attack
email
nvd
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.047 Low
EPSS
Percentile
92.5%
The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between different mail folders, specified by the folderid and tofolderid parameters, via the ID parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| neosys:neon_webmail | neosys neon webmail | eq | 5.06 |
| neosys:neon_webmail | neosys neon webmail | eq | 5.07 |
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.047 Low
EPSS
Percentile
92.5%