Vulnerability · Published Apr 28, 2025 · Assigned by mitre

CVE-2022-41871

Medium 6.0

In plain English

A medium-severity OS command injection in SEPPmail from SEPPmail. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).

Severity (CVSS 3.1)6.0Medium

Exploit odds (30 days)1.1%top 35.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the user root.

Affected products (as reported)

Vendor	Product	Versions
SEPPmail	SEPPmail	12.1.17

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

References

https://www.seppmail.com/products/
https://code-white.com/public-vulnerability-list/