apache hupa vulnerabilities

Latest apache hupa CVEs

Newest publication first

1. CVE-2012-3536 Apache James Hupa Webmail application Cross-site Scripting Vulnerabilities

   Published 2018-02-27

   Medium·CVSS 6.1 EPSS 1.9%

   Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James project. An attacker could send a carefully crafted email to a user of Hupa which would trigger a XSS when the email was opened or when a list of messages were viewed...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.