RW
Product
Roundcube Webmail
On CISA KEVExploited in the wild
11
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 6Low 0
Watch
Add Roundcube Webmail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-16651 In wildKEV | 7.8 | Nov 9 | Roundcube Webmail File Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2015-5383 | 7.5 | May 23 | Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, or (3) logs directory Affected: 1.1.1 |
| CVE-2015-8770 | 7.5 | Jan 29 | Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated… Affected: through 1.0.7; 1.1.0; 1.1.1; 1.1.2; 1.1.3 |
Showing 3