Securenvoy Securmail
8 CVEs affecting Securenvoy Securmail. Latest disclosed: 2020-08-07. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7702 | Critical | 9.1 | 2018-03-15 | SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e-mail messages to arbitrary recipients… |
CVE-2020-13376 | Critical | 9.0 | 2020-08-07 | SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie. |
CVE-2018-7705 | High | 8.1 | 2018-03-15 | Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via… |
CVE-2018-7706 | Medium | 6.5 | 2018-03-15 | Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .. (dot dot)… |
CVE-2018-7704 | Medium | 6.5 | 2018-03-15 | SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a reply action to secmail/… |
CVE-2018-7701 | Medium | 6.5 | 2018-03-15 | Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers to hijack the authentication of arbitr… |
CVE-2018-7707 | Medium | 6.1 | 2018-03-15 | Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HTML via an HTML-form… |
CVE-2018-7703 | Medium | 6.1 | 2018-03-15 | Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HTML via the mailboxi… |