Vulnerabilities

TI-2018-10404 CVE-2018-14503 · GHSA-5r42-r8g9-wcrx

Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows…

LOW 29

Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00793 Published 2018-08-10 No fix listed CWE-79

TI-2018-06750 CVE-2018-9330 · GHSA-frj3-g8fp-vxpg

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field…

LOW 25

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-04-07 No fix listed CWE-79

TI-2015-05790 CVE-2015-6942 · GHSA-p83m-76m4-2p26

Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to…

LOW 29

Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00906 Published 2017-08-29 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows…

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field…

Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to…