Ciphertrust

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ciphertrust records in CISA KEV

No Ciphertrust vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ironmail 3 records LOW

Records

3 records in Ironmail · all components

TI-2007-01659 CVE-2007-1723 · GHSA-8f8g-3m88-qj8x

Multiple cross-site scripting (XSS) vulnerabilities in the administration console in…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defR…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01954 Published 2007-03-28 No fix listed CWE-79

TI-2006-05026 CVE-2006-5210 · GHSA-2m97-7j97-3fhw

Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote…

LOW 30

Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded "../" sequences ("%252e%252e/").

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04283 Published 2006-10-16 No fix listed

TI-2006-00523 CVE-2006-0538 · GHSA-2cfv-m46w-52hh

CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote…

LOW 17

CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connect…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02093 Published 2006-02-04 No fix listed

Open these records in search →

Critical	0
High	0
Medium	2
Low	1
No CVSS	0