Description
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients.
Scores
CVSS v3
7.5
EPSS
0.0011
EPSS Percentile
28.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-1286
Status
published
Products (4)
axis/axis_os
< 10.8
axis/axis_os_2016
< 6.50.5.5
axis/axis_os_2018
< 8.40.4.3
axis/axis_os_2020
< 9.80.3.5
Published
Oct 05, 2021
Tracked Since
Feb 18, 2026