CVE-2013-6017

Published: Jan 12, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary web script or HTML via the body of an e-mail message, as demonstrated by the SRC attribute of an IFRAME element.

Affected (32)

Products: Atmail: Atmail

Atmail

1 product

Atmail

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Atmail Atmail	Up to 7.1.6
Atmail Atmail	Version 6.20.10
Atmail Atmail	Version 6.20.11
Atmail Atmail	Version 6.20.12
Atmail Atmail	Version 6.20.13
Atmail Atmail	Version 6.20.4
Atmail Atmail	Version 6.20.5
Atmail Atmail	Version 6.20.6
Atmail Atmail	Version 6.20.7
Atmail Atmail	Version 6.20.8
Atmail Atmail	Version 6.3.0
Atmail Atmail	Version 6.3.1
Atmail Atmail	Version 6.3.2
Atmail Atmail	Version 6.3.3
Atmail Atmail	Version 6.3.4
Atmail Atmail	Version 6.3.5
Atmail Atmail	Version 6.3.6
Atmail Atmail	Version 6.4.0
Atmail Atmail	Version 6.4.1
Atmail Atmail	Version 6.4.2
Atmail Atmail	Version 6.5.0
Atmail Atmail	Version 6.6.0
Atmail Atmail	Version 6.6.1
Atmail Atmail	Version 6.6.2
Atmail Atmail	Version 6.6.3
Atmail Atmail	Version 6.6.4
Atmail Atmail	Version 7.1.0
Atmail Atmail	Version 7.1.1
Atmail Atmail	Version 7.1.2
Atmail Atmail	Version 7.1.3
Atmail Atmail	Version 7.1.4
Atmail Atmail	Version 7.1.5