PatchTheCVEopenfind vulnerabilities
Recent CVEs affecting openfind products. 5 tracked.
openfind has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-07-15. Highest priority: CVE-2024-6741 (score 43/100).
- CVE-2024-6741 MEDIUM 5.8 DOWNGRADE Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed
- CVE-2024-6740 MEDIUM 6.1 DOWNGRADE Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to
- CVE-2024-6739 MEDIUM 5.3 UPGRADE UPGRADE The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing
- CVE-2024-5400 HIGH 8.8 DOWNGRADE Openfind Mail2000 does not properly filter parameters of specific CGI
- CVE-2024-5399 HIGH 7.2 DOWNGRADE Openfind Mail2000 does not properly filter parameters of specific API
FAQ
How do I fix openfind vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openfind being exploited right now?
None of the tracked openfind CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openfind CVE should I patch first?
CVE-2024-6741 currently ranks highest (43/100): Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed.