CVE-2014-2325

MEDIUM 4.3CVE-2014-2325 · Published 14/03/2014 · updated 17/06/2026

In short

CVE-2014-2325 is a MEDIUM (CVSS 4.3) vulnerability affecting mail gateway (proxmox).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mail gateway proxmox	`= 3.0= 3.1= 3.1-5670= 3.1-5673≤ 3.1-5741`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the (1) state parameter to objects/who/index.htm or (2) User email address to quarantine/spam/manage.htm.

References

proxmox.com/news/archive/view/listid-1-proxmox-newsletter/mailid-48-proxmox-newsletter-march-2014-proxmox-ve-3-2-released/tmpl-component · Patch
seclists.org/fulldisclosure/2014/Mar/110 · Exploit
securityfocus.com/bid/66169 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free