ByteOS Network

CVE Vulnerability Details :

CVE-2025-42599

PUBLISHED

Known KEV

More Info Official Page

Assigner-jpcert

Assigner Org ID-ede6fdc4-6654-4307-a26d-3331c018e2ce

View Known Exploited Vulnerability (KEV) details

Published At-18 Apr, 2025 | 03:52

Updated At-30 Jul, 2025 | 01:36

▼CVE Numbering Authority (CNA)

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition.

Affected Products

Vendor

QUALITIA CO., LTD.

Product

Active! mail 6

Versions

Affected

BuildInfo: 6.60.05008561 and earlier

Problem Types

Type	CWE ID	Description
CWE	CWE-121	Stack-based buffer overflow

Metrics

Version	Base score	Base severity	Vector
3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://www.qualitia.com/jp/news/2025/04/18_1030.html	N/A
https://jvn.jp/en/jp/JVN22348866/	N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics Other Info

kev

dateAdded:

2025-04-28

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-42599

Timeline

Event	Date
CVE-2025-42599 added to CISA KEV	2025-04-28 00:00:00

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References