Skip to content
OpenAdvisories
Medium 1 exploited CVE DSA-4700-1 2 CVEs

roundcube - security update

Published Jun 11, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 roundcube 1.3.13+dfsg.1-1~deb10u1
Debian · 9 roundcube 1.2.3+dfsg.1-4+deb9u5

Vulnerabilities 2

  • Medium 6.3
    CVE-2020-13965 Exploited Public exploit EPSS 77%

    An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML att…

    roundcube roundcube Debian Ubuntu
    KEV Jun 26, 2024
  • Unscored —
    CVE-2020-13964

    An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include/rcmail_output_html.php allow…

    roundcube roundcube Debian Ubuntu