CVE-2020-26554
Published Nov 18, 2020REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message.
Vendor archive
3 CVEs tagged to vendor reddoxx — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.
REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message.
REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.
REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout.