| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name | Notes |
|---|---|---|---|---|---|
| CVE-2024-11182 | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability | exploitation_technique | T1566 | Phishing |
Comments
Threat actors can use spearphishing to deliver a malicious JavaScript payload, which then allows exfiltration of sensitive data from the email servers.
References
|
| CVE-2024-11182 | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability | primary_impact | T1059 | Command and Scripting Interpreter |
Comments
Threat actors can use spearphishing to deliver a malicious JavaScript payload, which then allows exfiltration of sensitive data from the email servers.
References
|
| CVE-2024-11182 | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability | primary_impact | T1567 | Exfiltration Over Web Service |
Comments
Threat actors can use spearphishing to deliver a malicious JavaScript payload, which then allows exfiltration of sensitive data from the email servers.
References
|