Reddoxx Maildepot — known CVE vulnerabilities

Every CVE whose affected-product data names Reddoxx Maildepot, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-19200 — CVSS 8.8 (high): REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.
• CVE-2019-19199 — CVSS 7.4 (high): REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout.
• CVE-2020-26554 — CVSS 6.1 (medium): REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message.