Transware Active! Mail — known CVE vulnerabilities

Every CVE whose affected-product data names Transware Active! Mail, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2009-4353 — CVSS 5.8 (medium): The Mobile Edition of TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0911, does…
• CVE-2009-4354 — CVSS 5.8 (medium): TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cookie, which allows…
• CVE-2010-3913 — CVSS 4.3 (medium): CRLF injection vulnerability in TransWARE Active! mail 6 build 6.40.010047750 and earlier allows remote attackers to inject arbitrary HTTP…
• CVE-2013-2302 — CVSS 1.9 (low): TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information belonging to…