CVEvulnerability
CVE-2009-4352
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0939, allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, (3) Cc, and (4) Bcc parameters.
Affected configurations
• transware active mail 2003
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/en/jp/JVN49083120/index.html jvn.jp
- http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000075.html jvndb.jvn.jp
- http://secunia.com/advisories/37602 Vendor Advisory
- http://www.transware.co.jp/support_am/security/vulnerability2.html www.transware.co.jp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54750 exchange.xforce.ibmcloud.com
- http://jvn.jp/en/jp/JVN49083120/index.html jvn.jp
- http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000075.html jvndb.jvn.jp
- http://secunia.com/advisories/37602 Vendor Advisory
- http://www.transware.co.jp/support_am/security/vulnerability2.html www.transware.co.jp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54750 exchange.xforce.ibmcloud.com