dkd direct mail

Name: dkd direct mail
Brand: dkd

productUS

cpe:2.3:a:dkd:direct_mail:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high5medium0low

updated 2026-10-30

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-7400US	high7.5	1.65% (76th)	—	3.1.2	2017-12-29	< 3.1.2
The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checking of authentication codes.
CVE-2020-12697US	medium5.3	1.31% (71st)	—	no fix	2020-05-13	≤ 5.2.3
The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.
CVE-2020-12699US	medium6.1	0.80% (57th)	—	no fix	2020-05-13	≤ 5.2.3
The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.
CVE-2020-12700US	medium4.3OT elevated	0.78% (56th)	—	no fix	2020-05-13	≤ 5.2.3
The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.
CVE-2020-12698US	medium4.3OT elevated	0.78% (56th)	—	no fix	2020-05-13	≤ 5.2.3
The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
CVE-2019-16698US	medium4.3OT elevated	0.69% (53rd)	—	no fix	2019-10-16	≤ 5.2.2
The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users t…

The flaw types (CWEs) most of these CVEs share.

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.