mail2000 vulnerabilities and fixes

Recent CVEs affecting mail2000, with upgrade or downgrade steps. 4 tracked.

mail2000 has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-07-15. Highest priority: CVE-2024-6741 (score 43/100).

• CVE-2024-6741 MEDIUM 5.8 DOWNGRADE Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed
• CVE-2024-6740 MEDIUM 6.1 DOWNGRADE Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to
• CVE-2024-5400 HIGH 8.8 DOWNGRADE Openfind Mail2000 does not properly filter parameters of specific CGI
• CVE-2024-5399 HIGH 7.2 DOWNGRADE Openfind Mail2000 does not properly filter parameters of specific API

FAQ

How do I fix mail2000 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mail2000 being exploited right now?

None of the tracked mail2000 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mail2000 CVE should I patch first?

CVE-2024-6741 currently ranks highest (43/100): Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed.

RSS feed for mail2000 · ← Back to latest CVEs