TO
Vendor
Totemo
9
CVEs
0
On KEV
0
New 30D
Products
TO6.1
Totemomail
Totemo
6 CVEs0 on KEV0 new
EG8.8
Encryption Gateway
Totemo
1 CVEs0 on KEV0 new
TO5.4
Totemodata
Totemo
1 CVEs0 on KEV0 new
TE7.5
Totemomail Encryption Gateway
Totemo
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-28063 | TO Totemomail Totemo | 6.1 | May 18 | Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS |
| CVE-2020-7918 | TO Totemomail Totemo | 5.4 | Mar 27 | An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other users via enumeration |
| CVE-2019-17189 | TO Totemodata Totemo | 5.4 | Oct 22 | totemodata 3.0.0_b936 has XSS via a folder name |
| CVE-2018-15513 | TO Totemomail Totemo | 5.3 | Aug 30 | Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role |
| CVE-2018-15512 | TO Totemomail Totemo | 6.1 | Aug 30 | Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML |
| CVE-2018-15511 | TO Totemomail Totemo | 6.1 | Aug 30 | Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML |
| CVE-2018-15510 | TO Totemomail Totemo | 6.1 | Aug 30 | Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML |
| CVE-2018-6563 | EG Encryption Gateway Totemo | 8.8 | Jun 20 | Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to hijack the authentication of users for… |
| CVE-2018-6562 | TE Totemomail Encryption Gateway Totemo | 7.5 | May 18 | totemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive information about user sessions and encryption key material via a JSONP hijacking attack |