Back to CVE Browser

CVE-2021-32234

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2021-11-17

Last Modified2024-11-21

Data SourcesNVD

Vulnerability Description

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.

Affected Platforms (CPE)

📦

Smartertools

Smartermail

>= 16.0.6345 and < 100.0.7803

References & Advisories

🔗 https://csirt.divd.nl/cases/DIVD-2021-00006/

🔗 https://www.smartertools.com/smartermail/release-notes/current

🔗 https://csirt.divd.nl/cases/DIVD-2021-00006/

🔗 https://www.smartertools.com/smartermail/release-notes/current

Related Vulnerabilities

CVE-2023-481165.4

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appointment.

CVE-2023-481155.4

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when m...

CVE-2023-481145.4

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document. This...

CVE-2021-439776.1

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS.