CVE-2018-6291

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-62929.8Remote Code Execution in Saperion Web Client version 7.5.2 83166.CVE-2018-62937.5Arbitrary File Read in Saperion Web Client version 7.5.2 83166.CVE-2018-62949.8Unsecured way of firmware update in Hanwha Techwin SmartcamsCVE-2018-62959.8Unencrypted way of remote control and communications in Hanwha Techwin SmartcamsCVE-2018-62965.3An undocumented (hidden) capability for switching the web interface in Hanwha Techwin SmartcamsCVE-2018-62979.8Buffer overflow in Hanwha Techwin SmartcamsCVE-2018-62989.8Remote code execution in Hanwha Techwin SmartcamsCVE-2018-62999.8Authentication bypass in Hanwha Techwin SmartcamsCVE-2018-63009.8Remote password change in Hanwha Techwin SmartcamsCVE-2018-63017.5Arbitrary camera access and monitoring via cloud in Hanwha Techwin SmartcamsCVE-2018-63027.5Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin SmartcamsCVE-2018-63037.5Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams