XSS in Ipswitch Imail_server
CVE-2014-3878
Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject arbitrary web script or HTML via (1) the Name field in an a…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.035 (87.8th percentile) — read the EPSS interpretation.
Affected products
- Ipswitch Imail_server — versions 12.3, 12.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)