SEPPmail 安全漏洞

SEPPmail is an email encryption and signing solution from the Swiss company SEPPmail. A security vulnerability exists in SEPPmail version 12.1.17 and earlier, which stems from a command injection in the Admin Portal that could lead to the execution of arbitrary code...

CVE-2022-41871

SEPPmail contains a command-injection vulnerability in the Admin Portal affecting versions up to 12.1.17. An authenticated attacker can execute arbitrary code with root privileges via the Admin Portal. The issue is documented across multiple sources (e.g., Red Hat, CNNVD, CVE records) with remedi...

PT-2025-18083 · Seppmail · Seppmail

Name of the Vulnerable Software and Affected Versions: SEPPmail versions prior to 12.1.18 Description: The issue allows command injection within the Admin Portal. An authenticated attacker can execute arbitrary code in the context of the user root. Recommendations: For versions prior to 12.1.18,...

CVE-2021-31740

SEPPMail's web frontend, user input is not embedded correctly in the web page and therefore leads to cross-site scripting vulnerabilities XSS...

Cross site scripting

SEPPMail's web frontend, user input is not embedded correctly in the web page and therefore leads to cross-site scripting vulnerabilities XSS...

CVE-2021-31740

SEPPMail's web frontend, user input is not embedded correctly in the web page and therefore leads to cross-site scripting vulnerabilities XSS...

CVE-2021-31740

SEPPMail's web frontend, user input is not embedded correctly in the web page and therefore leads to cross-site scripting vulnerabilities XSS...

SEPPmail 跨站脚本漏洞

SEPPmail is an email encryption and signature solution from the Swiss company SEPPmail. SEPPmail suffers from a cross-site scripting vulnerability that originates from a web front-end user input that is not properly embedded in a web page. An attacker could exploit this vulnerability to conduct a...

CVE-2021-31740

CVE-2021-31740 affects SEPPMail’s web frontend. The vulnerability is a cross-site scripting (XSS) flaw caused by user input not embedded correctly in the web page. Reported impact is limited to confidentiality and integrity (both Low) with no availability impact, CVSS 3.1: 6.1 (Network, Low/Low/N...

CVE-2021-31739

The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability XSS, because user input is not correctly encoded in HTML attributes when returned by the server.SEPPmail 11.1.10 allows XSS via a recipient address...

CVE-2021-31739

The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability XSS, because user input is not correctly encoded in HTML attributes when returned by the server.SEPPmail 11.1.10 allows XSS via a recipient address...

Cross site scripting

The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability XSS, because user input is not correctly encoded in HTML attributes when returned by the server.SEPPmail 11.1.10 allows XSS via a recipient address...

CVE-2021-31739

The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability XSS, because user input is not correctly encoded in HTML attributes when returned by the server.SEPPmail 11.1.10 allows XSS via a recipient address...

CVE-2021-31739

The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability XSS, because user input is not correctly encoded in HTML attributes when returned by the server.SEPPmail 11.1.10 allows XSS via a recipient address...

CVE-2021-31739

The CVE-2021-31739 entry concerns SEPPmail 11.1.10 with a Cross-Site Scripting (XSS) flaw caused by user input not being properly encoded in HTML attributes when returned by the server. Primary affected component: SEPPmail (version 11.1.10). Vulnerable condition: XSS via a recipient address. Impa...

SEPPmail 跨站脚本漏洞

SEPPmail is an email encryption and signing solution from the Swiss company SEPPmail. A security vulnerability exists in SEPPmail version 11.1.10, which stems from a cross-site scripting vulnerability XSS in which user input is not properly encoded as HTML attributes when returned by the server...

PT-2022-10050 · Seppmail · Seppmail

Name of the Vulnerable Software and Affected Versions: SEPPmail version 11.1.10 Description: The issue arises from incorrect encoding of user input in HTML attributes when returned by the server, leading to a Cross-Site Scripting XSS vulnerability. This allows XSS via a recipient address...

PT-2022-10051 · Seppmail · Seppmail

Name of the Vulnerable Software and Affected Versions: SEPPMail affected versions not specified Description: The issue arises from incorrect embedding of user input in the web page, leading to cross-site scripting vulnerabilities XSS. Recommendations: At the moment, there is no information about ...