4 matches found
CVE-2024-28063
Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...
6.1CVSS6.9AI score0.00269EPSS
SaveExploits0References1
CVE-2024-28063
Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...
6.1CVSS6.6AI score0.00269EPSS
SaveExploits0References1
CVE-2024-28063
Kiteworks Totemomail versions through 7.0.0 are vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability. The flaw exists in the /responsiveUI/EnvelopeOpenServlet endpoint, specifically targeting the envelopeRecipient parameter, which allows for the injection of malicious scripts. As a ...
6.8AI score0.00269EPSS
SaveExploits0References1Affected Software1
20