Vendor
Mimecast vulnerabilities
10 advisories tracked, 0 exploited in the wild according to CISA, 0 published in 2026.
Data refreshed 13 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
Nothing from Mimecast meets this bar right now: no CVE in CISA's exploited list, and none with a high exploitation score.
Products covered
Select a product to see only its advisories.
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2020-36519 | Email Security | Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment vi… | – | 0.81% | – | |
| CVE-2021-43269 | Incydr (Code42) | In Code42 app before 8.8.0, eval injection allows an attacker to change a device’s proxy configuration to u… | – | 1.3% | – | |
| CVE-2020-12736 | Incydr (Code42) | Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execu… | – | 2.0% | – | |
| CVE-2019-16861 | Incydr (Code42) | Code42 server through 7.0.2 for Windows has an Untrusted Search Path. | – | 0.38% | – | |
| CVE-2019-16860 | Incydr (Code42) | Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. | – | 0.37% | – | |
| CVE-2019-15131 | Incydr (Code42) | In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a in Code42 | – | 1.9% | – | |
| CVE-2019-11551 | Incydr (Code42) | In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a… | – | 0.25% | – | |
| CVE-2019-11553 | Incydr (Code42) | In Code42 for Enterprise through 6.8.4, an administrator without web restore permission but with the abilit… | – | 0.95% | – | |
| CVE-2019-11552 | Incydr (Code42) | Code42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6.8.8, and 6… | – | 0.55% | – | |
| CVE-2018-20131 | Incydr (Code42) | The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive per… | – | 0.30% | – |
Sources: Mimecast security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.