Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Winmail records in CISA KEVNo Winmail vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 42
An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0084 · Published 2024-03-09 · No fix listed CWE-284
Open these records in search →