Iredmail

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Iredmail records in CISA KEV

No Iredmail vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Iredadmin 1 record LOW Iredmail 1 record LOW

Records

2 records

TI-2018-15727 CVE-2018-1000072 · GHSA-42mj-wjw2-4gxp

iRedMail version prior to commit f04b8ef contains a Insecure Permissions vulnerability in…

LOW 36

iRedMail version prior to commit f04b8ef contains a Insecure Permissions vulnerability in Roundcube Webmail that can result in Exfiltrate a user's password protected secret GPG key file and other important configuration…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01701 Published 2018-03-13 No fix listed CWE-732

TI-2024-31579 CVE-2024-47227 · GHSA-wj7r-74h6-3r6w

iRedAdmin before 2.6 allows XSS, e.g., via order_name.

LOW 27

iRedAdmin before 2.6 allows XSS, e.g., via order_name.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2024-09-23 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0