Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: MailCleaner Clear all filters
TI-2024-02995 CVE-2024-3195 · GHSA-fj75-q86h-2r5g

MailCleaner Admin Endpoints path traversal

Priority HIGH 65

A vulnerability was found in MailCleaner up to 2023.03.14.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00953 Published 2024-04-29 No fix listed CWE-22
TI-2024-02994 CVE-2024-3194 · GHSA-2v33-23h8-f74g

MailCleaner Log File Endpoint cross site scripting

Priority LOW 29

A vulnerability was found in MailCleaner up to 2023.03.14 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00738 Published 2024-04-29 No fix listed CWE-79
TI-2024-02993 CVE-2024-3193 · GHSA-qqfg-7xr5-8hvg

MailCleaner Admin Endpoints os command injection

Priority MEDIUM 47

A vulnerability has been found in MailCleaner up to 2023.03.14 and classified as critical.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04234 Published 2024-04-29 No fix listed CWE-78
TI-2024-02992 CVE-2024-3192 · GHSA-xmgc-h398-rg8w

MailCleaner Admin Interface cross site scripting

Priority MEDIUM 43

A vulnerability, which was classified as problematic, was found in MailCleaner up to 2023.03.14.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00995 Published 2024-04-29 No fix listed CWE-79
TI-2024-02991 CVE-2024-3191 · GHSA-2fhr-94vx-gjwj

MailCleaner Email os command injection

Priority MEDIUM 51

A vulnerability, which was classified as critical, has been found in MailCleaner up to 2023.03.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05152 Published 2024-04-29 No fix listed CWE-78
TI-2019-16037 CVE-2019-1010246 · GHSA-qq5j-344j-x663

Missing authorization in MailCleaner

Priority LOW 36

MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01422 Published 2019-07-18 No fix listed CWE-862