Basic Webmail Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Basic Webmail Project records in CISA KEV

No Basic Webmail Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Basic Webmail 2 records LOW

Records

2 records

TI-2012-04685 CVE-2012-5569 · GHSA-9m8p-564h-5p6w

Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via a (1) page title or (2) crafted email me…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0181 Published 2012-12-03 No fix listed CWE-79

TI-2012-04686 CVE-2012-5570 · GHSA-9qw9-whmc-5f73

Information disclosure in Basic webmail module

LOW 22

The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0111 Published 2020-02-08 Fixed in 6.x-1.2 CWE-200

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0