Skip to main content

Smartermail CVE-2021-32234

CRITICAL
2021-11-17 cve@mitre.org
RCE Smartermail
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 17, 2021 - 17:15 nvd
CRITICAL 9.8

DescriptionNVD

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.

AnalysisAI

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution. Affected products include: Smartertools Smartermail. Version information: through 100..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Smartermail

View all
CVE-2026-23760 CRITICAL POC
9.8 Jan 22

SmarterTools SmarterMail prior to build 9511 contains a critical authentication bypass in the password reset API (CVE-20
CVE-2026-24423 CRITICAL POC
9.8 Jan 23

SmarterTools SmarterMail prior to build 9511 contains a second critical vulnerability (CVE-2026-24423) — an unauthentica
CVE-2019-7214 CRITICAL POC
9.8 Apr 24

SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. Rated critical severity (CVSS

CVE-2019-7212 HIGH POC
8.2 Apr 24

SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. Rated high severity (CVSS 8.2), this vulnerab
CVE-2023-48116 MEDIUM POC
5.4 Dec 21

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appoint
CVE-2023-48115 MEDIUM POC
5.4 Dec 21

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skip
CVE-2023-48114 MEDIUM POC
5.4 Dec 21

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG docu
CVE-2026-7807 HIGH
8.7 May 08

Authenticated attackers can read arbitrary JSON files from SmarterMail servers prior to build 9560 through a path traver
CVE-2012-2578 MEDIUM POC
4.3 Sep 19

Multiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to inject arbitrary web sc
CVE-2019-7213 MEDIUM
6.5 Apr 24

SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. Rated medium severity (CVSS 6.5), this vulne
CVE-2021-43977 MEDIUM
6.1 Nov 17

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS. Rated medium severity (CVSS 6.1), this vulnera
CVE-2021-32233 MEDIUM
6.1 Jul 06

SmarterTools SmarterMail before Build 7776 allows XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2021-32234 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy