Login Request a demo
TO
Product
Totemomail
by Kiteworks · last CVE May 18, 2024
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 1High 0Medium 1Low 0
Severity
All severities2Critical1High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Totemomail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-28064
9.8
1%
May 18
Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations (with…
Affected: 7.0 before 8.0; 8.0 before 8.3.0
CVE-2024-28063
6.1
0%
May 18
Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS
Affected: through 7.0.0
Showing 2