3 matches found
CVE-2018-7704
SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a reply action to secmail/getmessage.exe...
6.5CVSS6.2AI score0.04712EPSS
SaveExploits5References3
Directory traversal
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .. dot dot in the option2 parameter in an attachment action to secmail/getmessage.exe...
4CVSS6.6AI score0.06831EPSS
SaveExploits5References3Affected Software1
20