CVE-2020-8275

MEDIUM 4.3CVE-2020-8275 · Published 06/01/2021 · updated 17/06/2026

In short

CVE-2020-8275 is a MEDIUM (CVSS 4.3) vulnerability affecting secure mail (citrix).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.4% of all vulnerabilities.
Fix: update to 20.11.0 or later.

Package	Affected versions	Patched versions
secure mail citrix	`< 20.11.0`	`20.11.0`

Description

Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device.

References

support.citrix.com/article/CTX286763 · Vendor Advisory

More vulnerabilities in secure mail

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free