CVE-2018-6291

WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1.

• CWE-79

• https://support.kaspersky.com/vulnerability.aspx?el=12430#010218Vendor Advisory
• https://www.coresecurity.com/advisories/kaspersky-secure-mail-gateway-multiple-vulnerabilitiesExploit, Technical Description, Third Party Advisory
• https://support.kaspersky.com/vulnerability.aspx?el=12430#010218Vendor Advisory
• https://www.coresecurity.com/advisories/kaspersky-secure-mail-gateway-multiple-vulnerabilitiesExploit, Technical Description, Third Party Advisory

Published

Feb 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6268NVIDIA Tegra library contains a vulnerability in libnvmmlite…
• CVE-2018-6269NVIDIA Jetson TX2 contains a vulnerability in the kernel dri…
• CVE-2018-6271NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerabil…
• CVE-2018-6288Cross-site Request Forgery leading to Administrative account…
• CVE-2018-6289Configuration file injection leading to Code Execution as Ro…
• CVE-2018-6290Local Privilege Escalation in Kaspersky Secure Mail Gateway …
• CVE-2018-6292Remote Code Execution in Saperion Web Client version 7.5.2 8…
• CVE-2018-6293Arbitrary File Read in Saperion Web Client version 7.5.2 831…
• CVE-2018-6294Unsecured way of firmware update in Hanwha Techwin Smartcams
• CVE-2018-6295Unencrypted way of remote control and communications in Hanw…
• CVE-2018-6296An undocumented (hidden) capability for switching the web in…
• CVE-2018-6297Buffer overflow in Hanwha Techwin Smartcams