Read the docs

Kerio

Records42All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Kerio records in CISA KEV

No Kerio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Connect · all components

Priority LOW 35

The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sendi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02471 Published 2011-03-22 No fix listed CWE-20
Open these records in search →