Login Request a demo
TO
Product
Totemomail
by Totemo · last CVE May 18, 2024
6
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 0Medium 6Low 0
Severity
All severities6Critical0High0Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Totemomail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-28063
6.1
0%
May 18
Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS
Affected: through 7.0.0
CVE-2018-15512
6.1
1%
Aug 30
Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML
Affected: 6.0.0
CVE-2018-15511
6.1
1%
Aug 30
Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML
Affected: 6.0.0
CVE-2018-15510
6.1
1%
Aug 30
Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML
Affected: 6.0.0
CVE-2020-7918
5.4
1%
Mar 27
An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other users via enumeration
Affected: 7.0.0
CVE-2018-15513
5.3
1%
Aug 30
Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role
Affected: 6.0.0
Showing 6