CVE-2021-38371

score

<0.1

cvss

7.5

epss

2.0%

published

2021-08-10

kev added

—

first seen

2026-10-21

Exim through 4.94.2 contains a response injection caused by improper handling during SMTP sending, letting attackers inject responses, exploit requires network access to SMTP service.