PatchTheCVEcoremail xt vulnerabilities and fixes
Recent CVEs affecting coremail xt, with upgrade or downgrade steps. 4 tracked.
Also searched as: coremailxt.
coremail xt has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-11-27. Highest priority: CVE-2015-6942 (score 41/100).
- CVE-2020-29133 MEDIUM 6.1 DOWNGRADE jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.htm
- CVE-2018-9330 MEDIUM 5.4 DOWNGRADE register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under regis
- CVE-2018-14503 MEDIUM 6.1 DOWNGRADE Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to in
- CVE-2015-6942 MEDIUM 6.1 DOWNGRADE Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web scr
FAQ
How do I fix coremail xt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is coremail xt being exploited right now?
None of the tracked coremail xt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which coremail xt CVE should I patch first?
CVE-2015-6942 currently ranks highest (41/100): Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web scr.