Totemo Totemomail
6 CVEs affecting Totemo Totemomail. Latest disclosed: 2024-05-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-28063 | Medium | 6.1 | 2024-05-18 | Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS. |
CVE-2018-15512 | Medium | 6.1 | 2019-08-30 | Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web s… |
CVE-2018-15511 | Medium | 6.1 | 2019-08-30 | Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web s… |
CVE-2018-15510 | Medium | 6.1 | 2019-08-30 | Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or H… |
CVE-2020-7918 | Medium | 5.4 | 2020-03-27 | An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other use… |
CVE-2018-15513 | Medium | 5.3 | 2019-08-30 | Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role. |