İçeriğe atla
Noroxi

totemo kayıtları

totemo üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

9 kayıt
  • CVE-2018-6563
    36İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    totemo · encryption gateway20 Haz 2018

  • CVE-2018-6562
    30İzleyin

    totemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive information about user sessions and encryption key

    YüksekCVSS 7,5İstismar yokEPSS %1

    totemo · totemomail encryption gateway18 May 2018

  • CVE-2018-15511
    24İzleyin

    Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inj

    OrtaCVSS 6,1İstismar yokEPSS %1

    totemo · totemomail30 Ağu 2019

  • CVE-2018-15512
    24İzleyin

    Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inj

    OrtaCVSS 6,1İstismar yokEPSS %1

    totemo · totemomail30 Ağu 2019

  • CVE-2018-15510
    24İzleyin

    Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitr

    OrtaCVSS 6,1İstismar yokEPSS %1

    totemo · totemomail30 Ağu 2019

  • CVE-2024-28063
    24İzleyin

    Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS.

    OrtaCVSS 6,1İstismar yokEPSS %0

    totemo · totemomail18 May 2024

  • CVE-2018-15513
    21İzleyin

    Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor ro

    OrtaCVSS 5,3İstismar yokEPSS %1

    totemo · totemomail30 Ağu 2019

  • CVE-2019-17189
    21İzleyin

    totemodata 3.0.0_b936 has XSS via a folder name.

    OrtaCVSS 5,4İstismar yokEPSS %1

    totemo · totemodata22 Eki 2019

  • CVE-2020-7918
    21İzleyin

    An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder

    OrtaCVSS 5,4İstismar yokEPSS %1

    totemo · totemomail27 Mar 2020