MediumCVSS 6.1
EPSS 0.35%
iRedAdmin before 2.6 allows XSS, e.g., via order_name.
Vendor
iredmail vulnerabilities
2 published CVES affecting iredmail, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest iredmail CVEs
Newest publication first
-
-
HighCVSS 7.5 EPSS 1.7%
iRedMail version prior to commit f04b8ef contains a Insecure Permissions vulnerability in Roundcube Webmail that can result in Exfiltrate a user's password protected secret GPG key file and other important configuration files.. This attack appear to be exploitable via network con...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.