Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via a .. (dot dot) in the filename parameter to secupload2/upload.aspx.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.082
EPSS Ranking 91.9%