1. Home
  2. Mapping Frameworks
  3. Known Exploited Vulnerabilities Home
  4. Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

Known Exploited Vulnerabilities CVE-2025-42599

Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote, unauthenticated attacker to execute arbitrary or trigger a denial-of-service via a specially crafted request.

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name Notes
CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability exploitation_technique T1190 Exploit Public-Facing Application
Comments
This stack-based buffer overflow vulnerability in Active! mail allows an unauthenticated attacker to achieve remote code execution, as well as execute a denial of service attack by crashing the server.
References
  1. https://hivepro.com/threat-advisory/active-mail-under-attack-via-cve-2025-42599/
CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability exploitation_technique T1588.006 Vulnerabilities
Comments
This stack-based buffer overflow vulnerability in Active! mail allows an unauthenticated attacker to achieve remote code execution, as well as execute a denial of service attack by crashing the server.
References
  1. https://hivepro.com/threat-advisory/active-mail-under-attack-via-cve-2025-42599/
CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability primary_impact T1059 Command and Scripting Interpreter
Comments
This stack-based buffer overflow vulnerability in Active! mail allows an unauthenticated attacker to achieve remote code execution, as well as execute a denial of service attack by crashing the server.
References
  1. https://hivepro.com/threat-advisory/active-mail-under-attack-via-cve-2025-42599/
CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability primary_impact T1499 Endpoint Denial of Service
Comments
This stack-based buffer overflow vulnerability in Active! mail allows an unauthenticated attacker to achieve remote code execution, as well as execute a denial of service attack by crashing the server.
References
  1. https://hivepro.com/threat-advisory/active-mail-under-attack-via-cve-2025-42599/