PatchTheCVEmail secure vulnerabilities and fixes
Recent CVEs affecting mail secure, with upgrade or downgrade steps. 2 tracked.
Also searched as: mailsecure.
mail secure has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-12-08. Highest priority: CVE-2021-36719 (score 47/100).
- CVE-2021-36720 MEDIUM 6.1 UPGRADE PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealin
- CVE-2021-36719 HIGH 8.8 UPGRADE PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system
FAQ
How do I fix mail secure vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mail secure being exploited right now?
None of the tracked mail secure CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mail secure CVE should I patch first?
CVE-2021-36719 currently ranks highest (47/100): PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system.