CVE-2015-9057

MEDIUM 6.1CVE-2015-9057 · Published 03/05/2017 · updated 17/06/2026

In short

CVE-2015-9057 is a MEDIUM (CVSS 6.1) vulnerability affecting proxmox mail gateway (proxmox).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
proxmox mail gateway proxmox	`≤ 4.0-4\/b38fc5d9`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm, /queues/mail/index/, /system/ssh.htm, /queues/mail/?domain=, and /quarantine/virus/manage.htm.

References

trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-024 · Exploit

More vulnerabilities in proxmox mail gateway

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free