CVE-2025-42599

Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

Qualitia — Active! Mail

Added to KEV catalog: 28 April 2025
Federal remediation due date: 19 May 2025
Weakness classification (CWE): CWE-121

CISA Description

Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote, unauthenticated attacker to execute arbitrary or trigger a denial-of-service via a specially crafted request.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://www.qualitia.com/jp/news/2025/04/18_1030.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-42599

View on NVD View on MITRE CVE View full CISA catalog

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services