Advisories · Technology
SEPPmail AG SEPPmail Secure Email Gateway (SEG).
Every CVE that names SEPPmail AG SEPPmail Secure Email Gateway (SEG) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.3 High
Empty initial password permits GINA account takeover
- SEPPmail AG SEPPmail Secure Email Gateway (SEG)
- CWE-640
- CVSS 6.9 Medium
LDAP wildcard injection exposes GINA recipient accounts
- SEPPmail AG SEPPmail Secure Email Gateway (SEG)
- Other injection
- CVSS 8.7 High
Pre-authentication upload parsing permits resource exhaustion
- SEPPmail AG SEPPmail Secure Email Gateway (SEG)
- Denial of service
- CVSS 9.2 CriticalCritical · CVSS 9+
Forged LFT metadata permits arbitrary file read and deletion
- SEPPmail AG SEPPmail Secure Email Gateway (SEG)
- Path traversal
- CVSS 9.2 CriticalCritical · CVSS 9+
Code execution through double evaluation in address replacement rules
- SEPPmail AG SEPPmail Secure Email Gateway (SEG)
- Code injection
- CVSS 8.6 High
Unsafe deserialization in the REST interface
- SEPPmail AG SEPPmail Secure Email Gateway (SEG)
- Command injection
- Insecure deserialization
- CVSS 7.7 High
Mandatory MFA bypass before enrollment
- SEPPmail AG SEPPmail Secure Email Gateway (SEG)
- Authentication bypass