Coremail

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Coremail records in CISA KEV

No Coremail vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Coremail Xt 3 records LOW

Records

3 records in Coremail Xt · all components

TI-2018-10404 CVE-2018-14503 · GHSA-5r42-r8g9-wcrx

Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows…

LOW 29

Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00793 Published 2018-08-10 No fix listed CWE-79

TI-2015-05790 CVE-2015-6942 · GHSA-p83m-76m4-2p26

Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to…

LOW 29

Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00906 Published 2017-08-29 No fix listed CWE-79

TI-2018-06750 CVE-2018-9330 · GHSA-frj3-g8fp-vxpg

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field…

LOW 25

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-04-07 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0