CVE-2018-15510

概要

参考情報

• contextis.com/en/resources/advisories/cve-2018-15510 · Third Party Advisory

totemomail のその他の脆弱性

• CVE-2024-28063中 6.1Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS.
• CVE-2020-7918中 5.4An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder…
• CVE-2018-15513中 5.3Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor ro…
• CVE-2018-15512中 6.1Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inj…
• CVE-2018-15511中 6.1Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inj…