4 matches found
CVE-2024-28063
Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...
6.1CVSS6.9AI score0.00269EPSS
SaveExploits0References1
CVE-2024-28063
Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...
6.1CVSS6.6AI score0.00269EPSS
SaveExploits0References1
CVE-2024-28063
Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...
6.9AI score0.00269EPSS
SaveExploits0References1
CVE-2024-28063
Kiteworks Totemomail versions through 7.0.0 are vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability. The flaw exists in the /responsiveUI/EnvelopeOpenServlet endpoint, specifically via the envelopeRecipient parameter, where improper neutralization of input during web page generatio...
6.1CVSS6.8AI score0.00269EPSS
SaveExploits0References1Affected Software1
20