Kiteworks / Totemomail

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2024-28064	Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete o…	CRITICAL	9.8	May 18, 2024
CVE-2024-28063	Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS.	MEDIUM	6.1	May 18, 2024

Rows per page

Showing 1 to 2 of 2 CVEs