All vulnerabilities

Servers and applications

CVE-2019-7213

SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new folders in arbitrary locations on the mail server. This could lead to command execution on the server for instance by putting files inside the web directories.

Severity
Medium 6.5
Published
24 Apr 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
16.3.6985
Exploit chance
42% in the next 30 daysHigher than 98% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
SmarterMailServers and applications · cpe:a:smartertools:smartermail
  • From 16.0.6345 before 16.3.6985

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-7213
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-7213