Reddoxx

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Reddoxx records in CISA KEV

No Reddoxx vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Maildepot · all components

TI-2019-13834 CVE-2019-19200 · GHSA-qgqj-ghq4-h994

MEDIUM 41

REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01707 Published 2020-10-06 No fix listed CWE-863

TI-2019-13833 CVE-2019-19199 · GHSA-gjmc-f7wf-pjp6

LOW 35

REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01164 Published 2020-10-02 No fix listed CWE-613

TI-2020-16188 CVE-2020-26554 · GHSA-5fwv-7jpm-2g8v

LOW 29

REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01044 Published 2020-11-18 No fix listed CWE-79