Skip to content
OpenAdvisories

Vendor

Alinto

16 known vulnerabilities.

Products

SOGo 14 SOGo Webmail 1 SOPE 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.0
    CVE-2026-33550

    SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits ins…

    Alinto SOGo sogo sogo Debian Ubuntu
  • Low 3.5
    CVE-2022-4556 Public exploit

    Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting

    A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function _migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument…

    Alinto SOGo sogo sogo Debian Ubuntu
  • Low 3.5
    CVE-2022-4558

    Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting

    A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It …

    Alinto SOGo sogo sogo Debian Ubuntu