PT-2019-19854
CVE-2019-9763
·
Published
2019-06-19
·
Updated
2019-10-29
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Openfind Mail2000 versions 6.0 through 7.0
Description
An issue was discovered in Openfind Mail2000 Webmail, where XSS can occur via an '<object data="data:text/html' substring in an e-mail message.
Recommendations
For Openfind Mail2000 versions 6.0 through 7.0, update to a patched version to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾