Lucene search

K
cvelistMitreCVELIST:CVE-2016-6854
HistoryDec 15, 2016 - 6:31 a.m.

CVE-2016-6854

2016-12-1506:31:00
mitre
www.cve.org
3

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

55.3%

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed when verifying the signature. Malicious script code can be executed within a user’s context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.).

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

55.3%