Skip to content
OpenAdvisories
Unscored DLA-537-1 2 CVEs

roundcube - security update

Published Jun 30, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 roundcube 0.7.2-9+deb7u3

Vulnerabilities 2

  • Unscored —
    CVE-2015-8864

    Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attacke…

    roundcube Debian
  • Unscored —
    CVE-2016-4068

    Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attacke…

    roundcube roundcube Debian Ubuntu