CVE-2003-0488

MEDIUM 5.1CVE-2003-0488 · Published 07/08/2003 · updated 16/06/2026

In short

CVE-2003-0488 is a MEDIUM (CVSS 5.1) vulnerability affecting kerio mailserver (kerio).
Chance of exploitation in the next 30 days (EPSS): 6.8%, higher than 94.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kerio mailserver kerio	`= 5.6.3`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module.

References

marc.info
nautopia.org/vulnerabilidades/kerio_mailserver.htm · Exploit
securityfocus.com/bid/7966 · Exploit
securityfocus.com/bid/7968 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/12367

More vulnerabilities in kerio mailserver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

kerio mailserver

kerio

= 5.6.3

No fix yet

More vulnerabilities in kerio mailserver

See all →