Openfind Mail2000
11 CVEs affecting Openfind Mail2000. Latest disclosed: 2024-07-15. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5400 | High | 8.8 | 2024-05-27 | Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regular privileges can exploit this vulnerability to execute arbit… |
CVE-2024-5399 | High | 7.2 | 2024-05-27 | Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vulnerability to execut… |
CVE-2020-12776 | Medium | 6.6 | 2020-09-01 | Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator acc… |
CVE-2024-6740 | Medium | 6.1 | 2024-07-15 | Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within the attachment and… |
CVE-2019-15073 | Medium | 6.1 | 2019-11-20 | An Open Redirect vulnerability for all browsers in MAIL2000 through version 6.0 and 7.0, which will redirect to a malicious site without authentication. This v… |
CVE-2019-15072 | Medium | 6.1 | 2019-11-20 | The login feature in "/cgi-bin/portal" in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary… |
CVE-2019-15071 | Medium | 6.1 | 2019-11-20 | The "/cgi-bin/go" page in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via ACTION… |
CVE-2019-9763 | Medium | 6.1 | 2019-06-19 | An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' substring in an e-mail message (The vendo… |
CVE-2024-6741 | Medium | 5.8 | 2024-07-15 | Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vulnerability using spe… |
CVE-2023-28705 | Medium | 5.4 | 2023-06-02 | Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerab… |
CVE-2023-22902 | Medium | 5.4 | 2023-03-27 | Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can exploit t… |