Read the docs

SmarterTools

Records56All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

SmarterTools records in CISA KEV
TI-2026-19690 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability Priority CRITICAL 99KEV 2026-02-05TI-2025-32755 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability Priority CRITICAL 100KEV 2026-01-26TI-2026-19133 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 99KEV 2026-01-26

Components

Products in the NVD configurations · select one to filter the records
Smartermail 27 records CRITICAL Smarterstats 17 records MEDIUM Smartertrack 7 records HIGH Smartermail Enterprise 1 record LOW

Records

1 record in Smartermail Enterprise · all components

TI-2008-00838 CVE-2008-0872 · GHSA-jc4m-r9c3-28j2

Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail mes…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0172 Published 2008-02-21 No fix listed CWE-79
Open these records in search →