Openfind / Mail2000
11 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-6741 | Openfind Mail2000 - HttpOnly flag bypass | MEDIUM | 5.8 | Jul 15, 2024 |
| CVE-2024-6740 | Openfind Mail2000 - Stored XSS | MEDIUM | 6.1 | Jul 15, 2024 |
| CVE-2024-5400 | Openfind Mail2000 - OS Command Injection | HIGH | 8.8 | May 27, 2024 |
| CVE-2024-5399 | Openfind Mail2000 - OS Command Injection | HIGH | 7.2 | May 27, 2024 |
| CVE-2023-28705 | Openfind Mail2000 - XSS (Reflected Cross-site scripting) | MEDIUM | 6.1 | Jun 2, 2023 |
| CVE-2023-22902 | Openfind Mail2000 - XSS | MEDIUM | 5.4 | Mar 27, 2023 |
| CVE-2020-12776 | Openfind Mail2000 - Broken Access Control | HIGH | 7.2 | Sep 1, 2020 |
| CVE-2019-15072 | Openfind MAIL2000 Webmail Post-Auth Cross-Site Scripting | MEDIUM | 6.1 | Nov 20, 2019 |
| CVE-2019-15073 | Openfind MAIL2000 Webmail Pre-Auth Open Redirect | MEDIUM | 6.1 | Nov 20, 2019 |
| CVE-2019-15071 | Openfind MAIL2000 Webmail Pre-Auth Cross-Site Scripting | MEDIUM | 6.1 | Nov 20, 2019 |
| CVE-2019-9763 | An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' substring in an e-mail message (The vendo… | MEDIUM | 6.1 | Jun 19, 2019 |
Showing 1 to 11 of 11 CVEs