Vulnerabilities > CVE-2024-6740 - Unspecified vulnerability in Openfind Mail2000 7.0/8.0

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
openfind
NVD
Published: 2024-07-15
Updated: 2024-11-21

Summary

Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within the attachment and perform Stored Cross-site scripting attacks.

Vulnerable Configurations

Part Description Count
Application
Openfind
2

References