Vendors / Extra Innovation Inc. Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Extra Innovation Inc. records in CISA KEV No Extra Innovation Inc. vulnerabilities are listed in CISA KEV.
Priority MEDIUM 52
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01424 · Published 2025-02-17 · No fix listed CWE-78
Priority MEDIUM 40
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2026-08-19 · Fixed in 4.1.2, 1.2.2 CWE-863
Priority LOW 27
Cross-site scripting vulnerability exists in acmailer CGI ver.4.0.5 and earlier.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0029 · Published 2025-02-12 · No fix listed CWE-79
Priority LOW 23
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00262 · Published 2026-08-19 · Fixed in 4.1.2, 1.2.2 CWE-79
Open these records in search → All records by CVSS severity
1 1 2 0 0
THREATIST.IORead the docs