Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Openfind MAIL2000 Before 20190919, SP4 Patch 076 Clear all filters
TI-2019-11252 CVE-2019-15072 · GHSA-pm96-chg7-mq3g

Openfind MAIL2000 Webmail Post-Auth Cross-Site Scripting

Priority LOW 30

The login feature in "/cgi-bin/portal" in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via any parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01516 Published 2019-11-20 Fixed in Before 20190919, SP4 Patch 076 CWE-79
TI-2019-11253 CVE-2019-15073 · GHSA-xf64-8wfw-hq58

Openfind MAIL2000 Webmail Pre-Auth Open Redirect

Priority LOW 29

An Open Redirect vulnerability for all browsers in MAIL2000 through version 6.0 and 7.0, which will redirect to a malicious site without authentication.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01126 Published 2019-11-20 Fixed in Before 20190919, SP4 Patch 076 CWE-601
TI-2019-11251 CVE-2019-15071 · GHSA-5pcw-pjx7-5hgw

Openfind MAIL2000 Webmail Pre-Auth Cross-Site Scripting

Priority LOW 31

The "/cgi-bin/go" page in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via ACTION parameter without authentication.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01628 Published 2019-11-20 Fixed in Before 20190919, SP4 Patch 076 CWE-79