📦

secure_mail_gateway

Vendor: kaspersky

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 8 Total Indexed
Avg. EPSS 1.92% Exploit Prob.
Latest CVE CVE-2018-6291 Feb 06

Security Vulnerability Index

Page 1 / 1
6.1 CVSS
CVE-2018-6291

WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1.

EPSS: 0.85%
7.8 CVSS
CVE-2018-6290

Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1.

EPSS: 0.48%
9.8 CVSS
CVE-2018-6289

Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.

EPSS: 6.60%
8.8 CVSS
CVE-2018-6288

Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1.

EPSS: 0.64%
4.3 CVSS
CVE-2013-6037

Cross-site scripting (XSS) vulnerability in index.php in Aker Secure Mail Gateway 2.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg_id parameter.

EPSS: 1.01%