CVE-2010-3913

MEDIUM 4.3CVE-2010-3913 · Published 05/11/2010 · updated 16/06/2026

In short

CVE-2010-3913 is a MEDIUM (CVSS 4.3) vulnerability affecting active! mail (transware).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
active! mail transware	`≤ 6.40.010047750`	No fix yet

Description

CRLF injection vulnerability in TransWARE Active! mail 6 build 6.40.010047750 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

References

jvn.jp/en/jp/JVN72541530/index.html
jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000050.html
secunia.com/advisories/42039 · Vendor Advisory
osvdb.org/68943
transware.co.jp/security/am0610001.html

More vulnerabilities in active! mail

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free