EV
Product
evolution-data-server
6
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add evolution-data-server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-4166 | 7.5 | Feb 6 | The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG… Affected: through 3.9.5 |
| CVE-2020-16117 | 5.9 | Jul 29 | In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line… Affected: before 3.35.91 |
| CVE-2020-14928 | 5.9 | Jul 17 | evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3 Affected: through 3.36.3 |
| CVE-2026-110777 | 5.7 | Oct 14 | Evolution-data-server: local file disclosure via attach file:// uris Affected: 3.26 before 3.62.1 |
| CVE-2026-2604 | 5.6 | Jun 16 | Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling Affected: before 3.59.3 |
| CVE-2009-0582 | – | Mar 14 | The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier,… Affected: through 2.24.5; 2.25.92 |
Showing 6