SEPPmail Secure Email Gateway HTML Injection Vulnerability in CA Notification Emails

Vulnerability

A vulnerability exists in SEPPmail Secure Email Gateway versions prior to 15.0.3, allowing attackers to inject HTML into notification emails regarding new CA certificates. This injection could potentially be exploited to manipulate the email's content or presentation.

Impact

Exploitation of this vulnerability could lead to unauthorized HTML injection, allowing for potential manipulation of email content or presentation.

Remediation

Users can update to SEPPmail Secure Email Gateway version 15.0.3 or later, where this vulnerability has been fixed.

Added: Apr 2, 2026, 9:20 AM
Updated: Apr 2, 2026, 9:20 AM

Vulnerability Rating

Custom Algorithm
spread
2.2
impact
0.2
exploitability
6.8
remediation
7.7
relevance
5.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.