Lucene search
HistoryAug 25, 2022 - 3:15 p.m.
CVE-2022-37240
mdaemon technologies
securitygateway
email servers
http response splitting
format parameter
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.8%
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.
Affected configurations
Node
altnsecurity_gateway_for_email_serversMatch8.5.2
Related
cve
cve
CVE-2022-37240
2022-08-25 15:15:09
prion
prion
Design/Logic Flaw
2022-08-25 15:15:00
cvelist
cvelist
CVE-2022-37240
2022-08-25 14:56:25
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.8%
Related for NVD:CVE-2022-37240