Skip to content
OpenAdvisories

Product · Openfind

MailAudit

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-6739

    Openfind MailGates and MailAudit - Sensitive Cookie Without 'HttpOnly' Flag

    The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.

    Openfind MailAudit MailGates