GCVE - cpe:2.3:a:totemo:totemomail:6.0.0:570:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:totemo:totemomail:6.0.0:570:*:*:*:*:*:*

part: a version: 6.0.0 update: 570

Vendor	Totemo (`c1dbd5a6-582e-503f-9c61-e7be982db20e`)
Product	Totemomail (`79a77093-e163-5d3e-adbf-be9746b35c7d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-15513`	vulnerable	2026-06-08 05:10:54.885588	Details available Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role. Published: 2019-08-29T21:21:51.000Z Updated: 2024-08-05T09:54:03.506Z Open on db.gcve.eu Reference links https://www.contextis.com/en/resources/advisories/cve-2018-15513	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15512`	vulnerable	2026-06-08 05:10:54.885285	Details available Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML. Published: 2019-08-29T21:17:51.000Z Updated: 2024-08-05T09:54:03.550Z Open on db.gcve.eu Reference links https://www.contextis.com/en/resources/advisories/cve-2018-15512	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15511`	vulnerable	2026-06-08 05:10:54.884861	Details available Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML. Published: 2019-08-29T21:31:48.000Z Updated: 2024-08-05T09:54:03.635Z Open on db.gcve.eu Reference links https://www.contextis.com/en/resources/advisories/cve-2018-15511	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15510`	vulnerable	2026-06-08 05:10:54.884455	Details available Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML. Published: 2019-08-29T21:28:32.000Z Updated: 2024-08-05T09:54:03.756Z Open on db.gcve.eu Reference links https://www.contextis.com/en/resources/advisories/cve-2018-15510	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.