Mandrill

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-47828 Jun 12, 10:15 MEDIUM This Month

Missing Authorization vulnerability in Mandrill wpMandrill.33. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Mandrill

NVD

CVSS 3.1

4.3

EPSS

0.4%

CVE-2012-5544 Dec 03, 21:55 MEDIUM PATCH This Month

The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs in the Mandrill dashboard. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Mandrill Thinkshout

NVD

CVSS 2.0

4.0

EPSS

0.2%

CVE-2023-47828

EPSS 0% CVSS 4.3

MEDIUM This Month

Missing Authorization vulnerability in Mandrill wpMandrill.33. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Mandrill

NVD

CVE-2012-5544

EPSS 0% CVSS 4.0

MEDIUM PATCH This Month

Information Disclosure Mandrill Thinkshout

NVD