SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an absolute request-size limit. An unauthenticated remote attacker can occupy workers and consume temporary storage with concurrent or slow requests, causing service unavailability.
This website uses analytics to understand how it is used and to keep improving it. Collection is on by default: you can object to it here, or allow it again later.
