VendorsOpenfindmail2000all versions
Vulnerabilities

Openfind Mail2000

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs
CVE-2020-12776
Openfind Mail2000 - Broken Access Control
Published 2020-09-01 · Modified
9.0EPSS 0.008
CVE-2024-5400
Openfind Mail2000 - OS Command Injection
Published 2024-05-27 · Analyzed
8.8EPSS 0.006
CVE-2024-5399
Openfind Mail2000 - OS Command Injection
Published 2024-05-27 · Analyzed
7.2EPSS 0.006
CVE-2019-15071
Openfind MAIL2000 Webmail Pre-Auth Cross-Site Scripting
Published 2019-11-20 · Modified
6.1EPSS 0.016
CVE-2019-15072
Openfind MAIL2000 Webmail Post-Auth Cross-Site Scripting
Published 2019-11-20 · Modified
6.1EPSS 0.015
CVE-2019-9763
An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' substring in an e-mail message (The vendor subsequently patched this).
Published 2019-06-19 · Modified
6.1EPSS 0.012
CVE-2019-15073
Openfind MAIL2000 Webmail Pre-Auth Open Redirect
Published 2019-11-20 · Modified
6.1EPSS 0.011
CVE-2024-6740
Openfind Mail2000 - Stored XSS
Published 2024-07-15 · Modified
6.1EPSS 0.005
CVE-2023-28705
Openfind Mail2000 - XSS (Reflected Cross-site scripting)
Published 2023-06-02 · Modified
6.1EPSS 0.004
CVE-2024-6741
Openfind Mail2000 - HttpOnly flag bypass
Published 2024-07-15 · Modified
5.8EPSS 0.006
CVE-2023-22902
Openfind Mail2000 - XSS
Published 2023-03-27 · Modified
5.4EPSS 0.004