Approved changes feed: RSS · Atom

cpe:2.3:a:transware:active\!_mail:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTransware (8b5e7b0d-f305-5656-a8ba-cbe4def44230)
ProductActive! Mail (bc7308f3-3bb9-57fe-ba06-76db4c5b1c1e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3913 vulnerable 2026-06-08 04:55:17.940647 Details available
CRLF injection vulnerability in TransWARE Active! mail 6 build 6.40.010047750 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Published: 2010-11-05T16:28:00.000Z
Updated: 2024-09-17T02:57:52.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4354 vulnerable 2026-06-08 04:51:48.146692 Details available
TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cookie, which allows remote attackers to hijack web sessions, probably related to the "secure" flag for cookies in SSL sessions.
Published: 2009-12-17T18:00:00.000Z
Updated: 2024-08-07T07:01:20.102Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.