Sun One Messaging Server vulnerabilities

4 CVEs affecting Sun One Messaging Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-2766, published 2010-01-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-2766, published 2010-01-28. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a…
CVE-2004-2765, published 2010-01-28. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to…
CVE-2005-2022, published 2005-06-17. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site…
CVE-2006-3159, published 2006-06-22. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified…