CVE-2004-0519

CVE-2004-0519 is a medium-severity vulnerability in Sgi Propack with a CVSS 2.0 base score of 6.8. Its EPSS exploit-prediction score of 23% places it in the 97th percentile, indicating an elevated likelihood of exploitation.

Key facts

Description

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.

Frequently asked questions

What is CVE-2004-0519?
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.
How severe is CVE-2004-0519?
CVE-2004-0519 has a CVSS 2.0 base score of 6.8, rated medium severity.
Is CVE-2004-0519 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 23% (97th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2004-0519?
CVE-2004-0519 primarily affects Sgi Propack. In total, 18 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2004-0519?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2004-0519 published?
CVE-2004-0519 was published on 2004-08-18 and last updated on 2026-06-16.

References

Affected products (18)

More vulnerabilities in Sgi Propack

All CVEs affecting Sgi Propack →