Openfind records

15 published records for vendor openfind.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 4
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

15 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2020-12782No exploit	Openfind MailGates - Command Injectionopenfind · mailaudit · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.9%	Jun 23, 2020
39Monitor	CVE-2024-6048No exploit	Openfind MailGates and MailAudit - OS Command Injectionopenfind · mailgates 5.0 · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.7%	Jun 17, 2024
36Monitor	CVE-2020-25849No exploit	Openfind MailGates/MailAudit - Command Injectionopenfind · mailaudit · CWE-78 RCE Command injection	High8.8	—	2.2%	Nov 1, 2020
35Monitor	CVE-2024-5400No exploit	Openfind Mail2000 - OS Command Injectionopenfind · mail2000 · CWE-78 RCE Command injection	High8.8	—	0.6%	May 27, 2024
28Monitor	CVE-2020-12776No exploit	Openfind Mail2000 - Broken Access Controlopenfind · mail2000 Broken access control (IDOR)	High7.2	—	0.8%	Sep 1, 2020
28Monitor	CVE-2024-5399No exploit	Openfind Mail2000 - OS Command Injectionopenfind · mail2000 · CWE-78 RCE Command injection	High7.2	—	0.6%	May 27, 2024
24Monitor	CVE-2019-15071No exploit	Openfind MAIL2000 Webmail Pre-Auth Cross-Site Scriptingopenfind · mail2000 · CWE-79 pre-auth RCE Auth bypass XSS	Medium6.1	—	1.6%	Nov 20, 2019
24Monitor	CVE-2019-15072No exploit	Openfind MAIL2000 Webmail Post-Auth Cross-Site Scriptingopenfind · mail2000 · CWE-79 pre-auth RCE XSS	Medium6.1	—	1.5%	Nov 20, 2019
24Monitor	CVE-2019-9763No exploit	An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail.openfind · mail2000 · CWE-79 Pre-auth XSS	Medium6.1	—	1.2%	Jun 19, 2019
24Monitor	CVE-2019-15073No exploit	Openfind MAIL2000 Webmail Pre-Auth Open Redirectopenfind · mail2000 · CWE-601 Pre-auth Auth bypass Open redirect	Medium6.1	—	1.1%	Nov 20, 2019
24Monitor	CVE-2024-6740No exploit	Openfind Mail2000 - Stored XSSopenfind · mail2000 · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Jul 15, 2024
24Monitor	CVE-2024-6739No exploit	Openfind MailGates and MailAudit - Sensitive Cookie Without 'HttpOnly' Flagopenfind · mailaudit · CWE-1004 Pre-auth XSS	Medium6.1	—	0.4%	Jul 15, 2024
24Monitor	CVE-2023-28705No exploit	Openfind Mail2000 - XSS (Reflected Cross-site scripting)openfind · mail2000 · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Jun 2, 2023
21Monitor	CVE-2024-6741No exploit	Openfind Mail2000 - HttpOnly flag bypassopenfind · mail2000 · CWE-693 Pre-auth	Medium5.3	—	0.6%	Jul 15, 2024
21Monitor	CVE-2023-22902No exploit	Openfind Mail2000 - XSSopenfind · mail2000 · CWE-79 XSS	Medium5.4	—	0.4%	Mar 27, 2023

CVE-2020-12782
40Plan
Openfind MailGates - Command Injection
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
openfind · mailauditJun 23, 2020
CVE-2024-6048
39Monitor
Openfind MailGates and MailAudit - OS Command Injection
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
openfind · mailgates 5.0Jun 17, 2024
CVE-2020-25849
36Monitor
Openfind MailGates/MailAudit - Command Injection
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Command injection
openfind · mailauditNov 1, 2020
CVE-2024-5400
35Monitor
Openfind Mail2000 - OS Command Injection
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
openfind · mail2000May 27, 2024
CVE-2020-12776
28Monitor
Openfind Mail2000 - Broken Access Control
HighCVSS 7.2No exploitEPSS 1%
- Broken access control (IDOR)
openfind · mail2000Sep 1, 2020
CVE-2024-5399
28Monitor
Openfind Mail2000 - OS Command Injection
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Command injection
openfind · mail2000May 27, 2024
CVE-2019-15071
24Monitor
Openfind MAIL2000 Webmail Pre-Auth Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 2%
openfind · mail2000Nov 20, 2019
CVE-2019-15072
24Monitor
Openfind MAIL2000 Webmail Post-Auth Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 2%
- pre-auth RCE
- XSS
openfind · mail2000Nov 20, 2019
CVE-2019-9763
24Monitor
An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
openfind · mail2000Jun 19, 2019
CVE-2019-15073
24Monitor
Openfind MAIL2000 Webmail Pre-Auth Open Redirect
MediumCVSS 6.1No exploitEPSS 1%
openfind · mail2000Nov 20, 2019
CVE-2024-6740
24Monitor
Openfind Mail2000 - Stored XSS
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
openfind · mail2000Jul 15, 2024
CVE-2024-6739
24Monitor
Openfind MailGates and MailAudit - Sensitive Cookie Without 'HttpOnly' Flag
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
openfind · mailauditJul 15, 2024
CVE-2023-28705
24Monitor
Openfind Mail2000 - XSS (Reflected Cross-site scripting)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
openfind · mail2000Jun 2, 2023
CVE-2024-6741
21Monitor
Openfind Mail2000 - HttpOnly flag bypass
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
openfind · mail2000Jul 15, 2024
CVE-2023-22902
21Monitor
Openfind Mail2000 - XSS
MediumCVSS 5.4No exploitEPSS 0%
- XSS
openfind · mail2000Mar 27, 2023