Advisories · Technology

Openfind Mail2000 V7.0.

Every CVE that names Openfind Mail2000 V7.0 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-6741 CVE record

CVSS 5.8 Medium

Openfind Mail2000 - HttpOnly flag bypass
- Openfind Mail2000 V7.0
- Openfind Mail2000 V8.0
- CWE-693
Not analysed yet 15 Jul 2024
CVE-2024-6740 CVE record

CVSS 6.1 Medium

Openfind Mail2000 - Stored XSS
- Openfind Mail2000 V7.0
- Openfind Mail2000 V8.0
- Cross-site scripting (XSS)
Not analysed yet 15 Jul 2024
CVE-2024-5399 CVE record

CVSS 7.2 High

Openfind Mail2000 - OS Command Injection
- Openfind Mail2000 V7.0
- Openfind Mail2000 V8.0
- Command injection
Not analysed yet 27 May 2024