CVE-2010-3913: CRLF injection vulnerability in TransWARE Active!

Security readout for executives and security teams

This CVE affects TransWARE Active! mail 6 build 6.40.010047750 and earlier. A remote attacker may be able to inject HTTP headers, enabling HTTP response splitting. The supplied sources do not provide CVSS, affected CPEs, specific attack vectors, or confirmed exploitation. Exposure appears limited to organizations running TransWARE Active! mail 6 build 6.40.010047750 or earlier. The provided bundle does not identify CPEs, vulnerable endpoints, deployment prerequisites, or whether only specific configurations are affected. Treat this as a targeted legacy-product risk. Prioritize only if Active! mail is present, especially on externally reachable systems. Urgency is constrained by incomplete severity data and no supplied evidence of active exploitation. Mitigation focus: Check the TransWARE vendor advisory for fixed versions or official workarounds.; Upgrade affected Active! mail installations if vendor guidance identifies a fixed build.; Reduce external exposure until vendor guidance and patch status are confirmed..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.