Citrix Secure Mail vulnerabilities

2 CVEs affecting Citrix Secure Mail, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8275, published 2021-01-06.

More from Citrix.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-8274, published 2021-01-06. Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days. Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read data stored within Secure Mail. Note…
• CVE-2020-8275, published 2021-01-06. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a…