CVE-2012-2588: XSS
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) body in an SMTP e-mail message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2588?
CVE-2012-2588 is classified as a medium severity vulnerability due to the potential for exploitation via cross-site scripting.
How do I fix CVE-2012-2588?
To fix CVE-2012-2588, upgrade MailEnable Enterprise to a version that includes patches for these specific XSS vulnerabilities.
What software versions are affected by CVE-2012-2588?
CVE-2012-2588 affects MailEnable Enterprise version 6.5.
What kind of attacks can exploit CVE-2012-2588?
CVE-2012-2588 can be exploited via remote attackers injecting arbitrary web scripts or HTML in specified email headers or body.
Is CVE-2012-2588 specific to any email headers?
Yes, CVE-2012-2588 specifically affects the From, To, and Subject headers, as well as the body of SMTP e-mail messages.