Lucene search
HistoryDec 26, 2008 - 5:30 p.m.
CVE-2008-5734
cve-2008-5734
cross-site scripting
xss
icewarp software
merak mail server
webmail pro
nvd
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
64.9%
Cross-site scripting (XSS) vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message.
| CPE | Name | Operator | Version |
|---|---|---|---|
| icewarp:merak_mail_server | icewarp merak mail server | eq | 9.3.2 |
Related
prion
prion
Cross site scripting
2008-12-26 17:30:00
openvas
openvas
nessus
nessus
IceWarp Merak Mail Server < 9.4.0 IMG Tag XSS
2008-12-30 00:00:00
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
64.9%
Related for CVE-2008-5734