roundcube vulnerabilities (Bitnami)

17 vulnerabilities.

• roundcube Bitnami Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content... CVE-2023-47272 Fix available 6.1 MediumNovember 5, 2023
• roundcube Bitnami Stored XSS vulnerability in Roundcube CVE-2023-5631 In KEVFix available EPSS 76.3% 6.1 MediumOctober 18, 2023
• roundcube Bitnami Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e... CVE-2023-43770 In KEVPublic exploitFix available EPSS 63.7% 6.1 MediumSeptember 22, 2023
• roundcube Bitnami Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's... CVE-2021-44025 Fix available 6.1 MediumNovember 19, 2021
• roundcube Bitnami Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search... CVE-2021-44026 In KEVPublic exploitFix available EPSS 69.9% 9.8 CriticalNovember 19, 2021
• roundcube Bitnami Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer... CVE-2020-18671 Fix available 5.4 MediumJune 24, 2021
• roundcube Bitnami Cross Site Scripting (XSS) vulneraibility in Roundcube mail .4.4 via database host and user in ... CVE-2020-18670 Fix available 5.4 MediumJune 24, 2021
• roundcube Bitnami Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences... CVE-2021-26925 Fix available 5.4 MediumFebruary 9, 2021
• roundcube Bitnami linkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a... CVE-2020-35730 In KEVPublic exploitFix available EPSS 32.9% 6.1 MediumDecember 28, 2020
• roundcube Bitnami Roundcube Webmail before 1.4.8 allows stored XSS in HTML messages during message display via a... CVE-2020-16145 Fix available 6.1 MediumAugust 11, 2020
• roundcube Bitnami An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before... CVE-2020-15562 Fix available 6.1 MediumJuly 6, 2020
• roundcube Bitnami An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include... CVE-2020-13964 Fix available 6.1 MediumJune 9, 2020
• roundcube Bitnami An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS... CVE-2020-13965 In KEVPublic exploitFix available EPSS 76.6% 6.1 MediumJune 9, 2020
• roundcube Bitnami Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via... CVE-2020-12640 Public exploitFix available 9.8 CriticalMay 4, 2020
• roundcube Bitnami rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via... CVE-2020-12641 In KEVPublic exploitFix available EPSS 84.4% 9.8 CriticalMay 4, 2020
• roundcube Bitnami An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS)... CVE-2020-12625 Public exploitFix available 6.1 MediumMay 4, 2020
• roundcube Bitnami An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an... CVE-2020-12626 Fix available 6.5 MediumMay 4, 2020