Vendors / Mercur Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Mercur records in CISA KEV No Mercur vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 80
Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to th…
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.6877 · Published 2006-03-19 · No fix listed
Priority LOW 37
Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) o…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01905 · Published 2005-05-18 · No fix listed
Priority LOW 25
Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20").
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01306 · Published 2005-05-18 · No fix listed
Open these records in search → All records by CVSS severity
1 1 1 0 0
