Totemo Totemomail — known CVE vulnerabilities

Every CVE whose affected-product data names Totemo Totemomail, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2018-15510 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject…
• CVE-2018-15511 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to…
• CVE-2018-15512 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to…
• CVE-2024-28063 — CVSS 6.1 (medium): Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS.
• CVE-2020-7918 — CVSS 5.4 (medium): An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail…
• CVE-2018-15513 — CVSS 5.3 (medium): Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor…