Vendors / Mailvelope Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Mailvelope records in CISA KEV No Mailvelope vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 31
Mailvelope prior to 3.3.0 allows private key operations without user interaction via its client-API.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0089 · Published 2019-07-09 · No fix listed CWE-347
Priority LOW 27
Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01379 · Published 2019-07-09 · No fix listed CWE-320
Priority LOW 23
Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.01388 · Published 2019-07-09 · No fix listed CWE-295
Priority LOW 23
Mailvelope prior to 3.1.0 is vulnerable to a clickjacking attack against the settings page.
CVSS 3.0 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.01441 · Published 2019-07-09 · No fix listed CWE-1021
Open these records in search → All records by CVSS severity
0 0 4 0 0
THREATIST.IORead the docs