CVSS 3.1
6.8 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:HCVE-2021-31986
Medium (6.8) in axis. EPSS 0.8% chance of exploitation in the next 30 days.
User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-122
- Published
- Modified
- Record from
- the NVD, synced
Affected
- axis:axis_os
- axis:axis_os_2016
- axis:axis_os_2018
- axis:axis_os_2020