Vulnerabilities

TI-2025-40326 CVE-2025-65319 · GHSA-gg78-3r36-662j

When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves…

HIGH 80

When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00567 Published 2025-12-16 No fix listed CWE-693

TI-2019-09216 CVE-2019-12367 · GHSA-g3gc-m5mr-qcgc

The BlueMail application through 1.9.5.36 for Android allows XSS via an event attribute…

LOW 29

The BlueMail application through 1.9.5.36 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00968 Published 2020-03-18 No fix listed CWE-79

Vulnerabilities

Filters

When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves…

The BlueMail application through 1.9.5.36 for Android allows XSS via an event attribute…