VULNERABILITY INTELLIGENCE

CVE-2023-28705

CVSS score5.4 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2023-06-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.

Weakness classification

  • twcert@cert.org.tw: CWE-79
  • nvd@nist.gov: CWE-79

Primary references