CVE-2020-12776

—

CVSS 3.1

7.2 high

EPSS

<1%p55

Published

Sep 1, 2020 (Sep 1, 2020)

Modified

Jun 17, 2026

Description

Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.

Vendors: openfind
Products: mail2000
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.