CVE-2011-3355

HIGH · CVSS 7.3 EPSS 0.78%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-11-25 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2011-3355

Severity

HIGH

CVSS

7.3

EPSS

0.78%

Original Filing — NVD Description

evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.