CVE-2019-9557

Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body

published March 12, 2019

CVSS
—
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00978 · 61.8th percentile
Published
2019-03-12T19:00Z
EPSS history
Timeline
  • 12 MAR 19:00Z
    Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body
    cvelistv5