CVE-2019-15072CWE-79

Openfind MAIL2000 Webmail Post-Auth Cross-Site Scripting

published November 20, 2019

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

The login feature in "/cgi-bin/portal" in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via any parameter. This vulnerability affects many mail system of governments, organizations, companies and universities.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01516 · 74.3th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2019-11-20T04:16Z
EPSS history
Timeline
  • 20 NOV 04:16Z
    Openfind MAIL2000 Webmail Post-Auth Cross-Site Scripting
    cvelistv5