sogo

11 results · Clear filters · Feed

• Medium 6.3
  CVE-2026-39178

  A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via …

  sogo sogo Debian Ubuntu
  Jul 8, 2026
• Medium 6.3
  CVE-2026-39179

  A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via …

  sogo sogo Debian Ubuntu
  Jul 8, 2026
• Medium 6.1
  CVE-2026-8496

  A cross-site scripting (XSS) vulnerability in Alinto SOGo, version 5.12.7

  A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7. A maliciously crafted ICS calendar invitation files allows arbitrary JavaScript execution within the authenticated SOGo webmail session. The issue occurs because SVG content emb…

  Alinto SOGo SOGo sogo sogo Debian Ubuntu
  May 13, 2026
• Medium 6.4
  CVE-2025-71276

  SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.

  Alinto SOGo sogo sogo Debian Ubuntu
  Mar 22, 2026
• Medium 4.3
  CVE-2026-3054

  Alinto SOGo cross site scripting

  A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the argument hint leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. The …

  Alinto SOGo sogo sogo Debian Ubuntu
  Feb 24, 2026
• Medium 6.1
  CVE-2025-63499 Public exploit

  Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.

  sogo sogo Debian Ubuntu
  Dec 4, 2025
• Medium 6.1
  CVE-2025-63498 Public exploit

  alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.

  sogo sogo Debian Ubuntu
  Nov 24, 2025
• Medium 6.1
  CVE-2024-24510

  Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via …

  sogo sogo Debian Ubuntu
  Sep 9, 2024
• Medium 6.1
  CVE-2024-34462

  Alinto SOGo through 5.10.0 allows XSS during attachment preview.

  sogo sogo Debian Ubuntu
  May 4, 2024
• Medium 6.1
  CVE-2023-48104 Public exploit

  Alinto SOGo before 5.9.1 is vulnerable to HTML Injection.

  sogo sogo Debian Ubuntu
  Jan 16, 2024
• Medium 6.1
  CVE-2020-22402

  Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive inform…

  sogo sogo Debian Ubuntu
  Jun 14, 2023