What’s Vulnerable › Vulnerabilities

CVE-2021-31739

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-11-18 · updated 2026-06-17
• Weakness: CWE-79

Description

The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability (XSS), because user input is not correctly encoded in HTML attributes when returned by the server.SEPPmail 11.1.10 allows XSS via a recipient address.

Affected products

• SEPPmail: 11.1.10

References

• https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-seppmail/
• https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-seppmail/

Get alerted when CVE-2021-31739 or the next vulnerability affects your stack