Clearswift vulnerabilities, page 2
25 vulnerabilities
Known vulnerabilities in Clearswift products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.
CVE-2004-0235clearswiftmailsweeper+12
EPSS score4.12%
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").CVE-2006-3216clearswiftmailsweeper_for_exchange+1EPSS score1.86%
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and (2) unspecified vectors involving malformed messages, which causes "unpredictable behavior" that prevents the Security service from processing more messages.CVE-2006-3215clearswiftmailsweeper_for_exchange+1EPSS score1.70%
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set.CVE-2006-3523clearswiftmimesweeper_for_webEPSS score1.60%
Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service (crash) via an encrypted archived .RAR file, which triggers a scan error and causes the Web Policy Engine service to terminate.CVE-2006-3522clearswiftmimesweeper_for_webEPSS score1.80%
Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site.