cybermail vulnerabilities and fixes

Recent CVEs affecting cybermail, with upgrade or downgrade steps. 3 tracked.

cybermail has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-08-25. Highest priority: CVE-2020-11734 (score 42/100).

• CVE-2020-5541 MEDIUM 6.1 DOWNGRADE Open redirect vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to redirect users to arbi
• CVE-2020-5540 MEDIUM 6.1 DOWNGRADE Cross-site scripting vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to inject arbitrar
• CVE-2020-11734 MEDIUM 6.1 DOWNGRADE cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter.

FAQ

How do I fix cybermail vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cybermail being exploited right now?

None of the tracked cybermail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cybermail CVE should I patch first?

CVE-2020-11734 currently ranks highest (42/100): cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter..

RSS feed for cybermail · ← Back to latest CVEs