Package · Alpine

roundcubemail

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

Unscored —

CVE-2018-19206 EPSS 56%

steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as demonstrated by an onload att…

roundcube roundcube roundcubemail Debian Ubuntu Alpine

Nov 12, 2018
Unscored —

CVE-2018-9846

In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's possible to exploit the…

roundcube roundcube roundcubemail Debian Ubuntu Alpine

Apr 7, 2018
High 7.8

CVE-2017-16651 Exploited Public exploit EPSS 46%

Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary fil…

roundcube roundcube roundcubemail Debian Ubuntu Alpine

Nov 9, 2017
KEV Nov 3, 2021
Unscored —

CVE-2017-8114

Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x b…

roundcube roundcube roundcubemail Debian Ubuntu Alpine

Apr 29, 2017