PO
Product
Postfix
12
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch
Add Postfix to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-51764 | 5.3 | Dec 24 | Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other… Affected: before 3.5.23; 3.6.0 before 3.6.13; 3.7.0 before 3.7.9; 3.8.0 before 3.8.4 |
| CVE-2020-12063 | 5.3 | Apr 24 | A certain Postfix 2.10.1-7 package could allow an attacker to send an email from an arbitrary-looking sender via a homoglyph attack, as demonstrated by the similarity of \xce\xbf… Affected: 2.10.1 |
Showing 2