Medium DLA-4434-1 2 CVEs

sogo - security update

Published Jan 6, 2026 · Updated Jan 6, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	sogo	5.0.1-4+deb11u3

Vulnerabilities 2

Medium 6.1

CVE-2024-34462

Alinto SOGo through 5.10.0 allows XSS during attachment preview.

sogo sogo Debian Ubuntu

May 4, 2024
Medium 6.1

CVE-2025-63499 Public exploit

Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.

sogo sogo Debian Ubuntu

Dec 4, 2025