VULNERABILITY INTELLIGENCE

CVE-2009-3749

CVSS score5 MEDIUM
EPSS probability7.64%
CISA KEVNot currently listed
Published2009-10-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response.

Primary references