Read the docs

NetWin

Records51All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

NetWin records in CISA KEV

No NetWin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Webmail · all components

Priority MEDIUM 44

Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitra…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07946 Published 2008-02-27 No fix listed CWE-134
Priority LOW 19

NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, whi…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03094 Published 2005-11-21 No fix listed
Open these records in search →