Vulnerability Details CVE-2022-27105
InMailX Outlook Plugin < 3.22.0101 is vulnerable to Cross Site Scripting (XSS). InMailX Connection names are not sanitzed in the Outlook tab, which allows a local user or network administrator to execute HTML / Javascript in the Outlook of users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.5%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2022-27105
-
cpe:2.3:a:digitus:inmailx:3.21.0801
-
cpe:2.3:a:digitus:inmailx:3.21.0901
-
cpe:2.3:a:digitus:inmailx:3.21.1001
-
cpe:2.3:a:digitus:inmailx:3.21.1101
-
cpe:2.3:a:digitus:inmailx:3.21.1201