CVE-2020-12782: falha crítica em Openfind MailGates
Openfind MailGates - Command Injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.9%
Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVEs relacionadas — Openfind MailGates
No mesmo produto, das mais perigosas para as menos.
CVE-2020-25849HIGHOpenfind MailGates/MailAudit - Command InjectionEPSS 2.2%CVE-2026-6350CRITICALOpenfind｜MailGates/MailAudit - Stack-based Buffer OverflowEPSS 0.8%CVE-2026-6351HIGHOpenfind｜MailGates/MailAudit - CRLF InjectionEPSS 0.6%CVE-2024-6739MEDIUMOpenfind MailGates and MailAudit - Sensitive Cookie Without 'HttpOnly' FlagEPSS 0.4%