Totemomail
Kiteworks · 2 CVEs
CVE-2024-28064
CRITICAL
Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal fo…
May 18, 2024
CVE-2024-28063
MEDIUM
Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS.
May 18, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-28064 | Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete o… | CRITICAL | 0.86% | May 18, 2024 |
| CVE-2024-28063 | Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS. | MEDIUM | 0.27% | May 18, 2024 |
Showing 1 to 2 of 2 CVEs