HOMEVULNERABILITIESVENDORSEndymion

EndymionCVEs & Vulnerabilities

4 CVEs affecting Endymion products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

4 CVEs→ All vendors

Most Affected Products

mailman webmail 49sake mail 15
CVE-2002-0417MEDIUM

Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.

12 Aug 2002
5.0
CVSS
CVE-2002-0418MEDIUM

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter.

12 Aug 2002
5.0
CVSS
CVE-2001-0021CRITICALpoc

MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.

16 Feb 2001
10.0
CVSS
CVE-1999-0850LOW

The default permissions for Endymion MailMan allow local users to read email or modify files.

2 Dec 1999
3.6
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database