What’s Vulnerable › Vulnerabilities

CVE-2018-0685

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-11-15 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.

Affected products

• NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier: through 3.3p_r4.0

References

• http://jvn.jp/en/jp/JVN00344155/index.html
• https://www.denbun.com/en/imap/support/security/181003.html
• https://www.denbun.com/en/pop/support/security/181003.html
• http://jvn.jp/en/jp/JVN00344155/index.html
• https://www.denbun.com/en/imap/support/security/181003.html
• https://www.denbun.com/en/pop/support/security/181003.html

Get alerted when CVE-2018-0685 or the next vulnerability affects your stack