Skip to content
OpenAdvisories

Vendor

Openfind

17 known vulnerabilities.

4 results · Clear filters · Feed

  • High 7.5

    Openfind|MailGates/MailAudit - CRLF Injection

    MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files.

  • High 8.8

    Openfind Mail2000 - OS Command Injection

    Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regular privileges can exploit this vulnerability to execute arbitrary system commands on the remote server.

  • High 7.2

    Openfind Mail2000 - OS Command Injection

    Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the remote server.

  • High 8.8

    Openfind MailGates/MailAudit - Command Injection

    MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands from the cgi parameter after attackers obtain the user’s access token.