Totemomail (Kiteworks) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-05-18. Vendor: Kiteworks.

CVEs of Totemomail

• CVE-2024-28064 - CVSS 9.8 (critical), 2024-05-18: Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete…
• CVE-2024-28063 - CVSS 6.1 (medium), 2024-05-18: Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS.