Vendors / Rumble Mail Server Project Rumble Mail Server Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Rumble Mail Server Project records in CISA KEV No Rumble Mail Server Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted file in the RumbleService executable service path.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00447 · Published 2022-04-04 · No fix listed CWE-428
Priority LOW 25
A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00583 · Published 2022-04-04 · No fix listed CWE-79
Priority LOW 25
Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00583 · Published 2022-04-04 · No fix listed CWE-79
Priority LOW 25
A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the (1) domain and (2) path parameters.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00583 · Published 2022-04-04 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 3 0 0
THREATIST.IORead the docs