Read the docs

Joruri

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Joruri records in CISA KEV

No Joruri vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Joruri Mail · all components

Priority LOW 30

Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01133 Published 2019-07-05 No fix listed CWE-601
Priority LOW 26

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.

CVSS 3.0MEDIUM 5.4 Network No auth User interaction EPSS 0.01042 Published 2019-07-05 No fix listed CWE-639
Open these records in search →