Winmail Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Winmail Project records in CISA KEV

No Winmail Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Winmail · all components

TI-2020-14671 CVE-2020-23776 · GHSA-r62f-j7fr-mvvx

LOW 34

A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00796 Published 2021-01-26 No fix listed CWE-918

TI-2020-14670 CVE-2020-23774 · GHSA-4r8h-m8q8-74wm

LOW 28

A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00612 Published 2021-01-26 No fix listed CWE-79