Search vulnerabilities

Results 3

Export CSV
CVE-2015-6942

Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-9330

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-14503

Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products