PatchTheCVEcoremail vulnerabilities
Recent CVEs affecting coremail products. 2 tracked.
coremail has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-08-10. Highest priority: CVE-2018-14503 (score 40/100).
- CVE-2018-9330 MEDIUM 5.4 DOWNGRADE register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under regis
- CVE-2018-14503 MEDIUM 6.1 DOWNGRADE Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to in
FAQ
How do I fix coremail vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is coremail being exploited right now?
None of the tracked coremail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which coremail CVE should I patch first?
CVE-2018-14503 currently ranks highest (40/100): Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to in.