Skip to content
OpenAdvisories

Package · Debian

sogo

25 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.3
    CVE-2026-93453 Public exploit

    SOGo before 5.12.11 Password Reset Token Interception via Origin Header

    SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers to redirect recovery tokens to attacker-controlled domains. Attackers can submit password recovery requests with a…

    Alinto SOGo sogo sogo Debian Ubuntu
  • Medium 6.1
    CVE-2025-63499 Public exploit

    Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.

    sogo sogo Debian Ubuntu
  • Medium 6.1
    CVE-2025-63498 Public exploit

    alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.

    sogo sogo Debian Ubuntu
  • Medium 6.1
    CVE-2023-48104 Public exploit

    Alinto SOGo before 5.9.1 is vulnerable to HTML Injection.

    sogo sogo Debian Ubuntu
  • Low 3.5
    CVE-2022-4556 Public exploit

    Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting

    A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function _migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument…

    Alinto SOGo sogo sogo Debian Ubuntu