CVE-2012-2588 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 2.4% (pctl 83)
Patch early
A public exploit exists.
Description
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) body in an SMTP e-mail message.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 2.39% — more likely to be exploited than 83% of all CVEs |
| Weakness | CWE-79 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2014-09-19 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| mailenable | mailenable |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | mailenable enterprise 6.5 - Persistent Cross-Site Scripting | 2012-08-08 |
References
- http://osvdb.org/84589
- http://secunia.com/advisories/50205
- http://www.exploit-db.com/exploits/20351
- http://www.securityfocus.com/bid/54900
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77547
- http://osvdb.org/84589
- http://secunia.com/advisories/50205
- http://www.exploit-db.com/exploits/20351
- http://www.securityfocus.com/bid/54900
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77547
→ the Explorer · watch your stack · NVD