Medium DLA-4386-1 1 CVE

sogo - security update

Published Nov 28, 2025 · Updated Nov 28, 2025

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	sogo	5.0.1-4+deb11u2

Vulnerabilities 1

Medium 6.1

CVE-2025-63498 Public exploit

alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.

sogo sogo Debian Ubuntu

Nov 24, 2025