Webtop Media Transcoder
Monthly
Openwave Webtop Media Transcoder fails to enforce the administrator-defined file-type restrictions that are meant to limit which documents may be converted, so an authenticated webmail user can reach the transcoding function outside the normal Webmail UI and have unintended document types processed. The flaw carries a CVSS v3.1 score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L), meaning any exploitation is confined to a low availability impact - no loss of confidentiality or integrity - and it requires a valid authenticated webmail account (PR:L). No public exploit code has been identified at time of analysis, KEV status is not indicated, and no EPSS score was supplied; this is a low-severity, authenticated-only issue that does not warrant priority remediation.
Openwave Webtop Media Transcoder fails to enforce the administrator-defined file-type restrictions that are meant to limit which documents may be converted, so an authenticated webmail user can reach the transcoding function outside the normal Webmail UI and have unintended document types processed. The flaw carries a CVSS v3.1 score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L), meaning any exploitation is confined to a low availability impact - no loss of confidentiality or integrity - and it requires a valid authenticated webmail account (PR:L). No public exploit code has been identified at time of analysis, KEV status is not indicated, and no EPSS score was supplied; this is a low-severity, authenticated-only issue that does not warrant priority remediation.