CVE-2019-9763

NONE EPSS 64.7%
Published Jun 19, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Jun 19, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' substring in an e-mail message (The vendor subsequently patched this).

Threat Intelligence

EPSS Exploit Probability
64.7% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
openfindmail20006.0any

References 3

  • gist.github.com https://gist.github.com/keniver/1f6092242ee79a8456a86bb7624bc171
    ExploitThird Party Advisory
  • openfind.com.tw https://www.openfind.com.tw/taiwan/download/m2k/patch/Openfind_OF-ISAC-19-004.pdf
  • openfind.com.tw https://www.openfind.com.tw/taiwan/download/m2k/patch/Openfind_OF-ISAC-19-005.pdf

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.