Totemo

9 CVEs across 4 Totemo products. Browse Totemo vulnerabilities, severities, and proof-of-concept exploits.

Totemo products with known CVEs

ProductCVEs
Totemomail6
Encryption Gateway1
Totemodata1
Totemomail Encryption Gateway1
Totemo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-28063Medium6.12024-05-18Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS.
CVE-2020-7918Medium5.42020-03-27An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other use…
CVE-2019-17189Medium5.42019-10-22totemodata 3.0.0_b936 has XSS via a folder name.
CVE-2018-15513Medium5.32019-08-30Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role.
CVE-2018-15512Medium6.12019-08-30Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web s…
CVE-2018-15511Medium6.12019-08-30Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web s…
CVE-2018-15510Medium6.12019-08-30Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or H…
CVE-2018-6563High8.82018-06-20Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to hijack the authent…
CVE-2018-6562High7.52018-05-18totemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive information about user sessions and encryption key material via a JSO…