Approved changes feed: RSS · Atom

cpe:2.3:a:kiteworks:totemomail:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

VendorKiteworks (d7914f90-f1d3-5b1c-b860-b41dc97d8156)
ProductTotemomail (be5dd931-4770-5785-9269-1933a9fb5ab5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28064 vulnerable 2026-06-08 06:33:26.311385 Details available
Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations (with displayLoginChunkedImages) and write operations (with storeLoginChunkedImages).
Published: 2024-05-18T22:02:03.643Z
Updated: 2025-02-13T15:47:34.149Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.