WE
Product
Webmail
On CISA KEVExploited in the wild
126
CVEs
11
On KEV
10.0
Max CVSS
20
New 30D
Severity mix
Critical 10High 29Medium 58Low 5
Watch
Add Webmail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-68461 In wildKEV | 6.1 | Dec 18 | RoundCube Webmail Cross-site Scripting Vulnerability Affected: before 1.5.12; 1.6.0 before 1.6.12 |
| CVE-2024-37383 In wildKEV | 6.1 | Jun 7 | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability Affected: before 1.5.7; 1.6.0 before 1.6.7 |
| CVE-2023-43770 In wildKEV | 6.1 | Sep 22 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Affected: before 1.4.14; 1.5.0 before 1.5.4; 1.6.0 before 1.6.3 |
| CVE-2020-35730 In wildKEV | 6.1 | Dec 28 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Affected: before 1.2.13; 1.3.0 before 1.3.16; 1.4 before 1.4.10 |
| CVE-2020-13965 In wildKEV | 6.1 | Jun 9 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Affected: before 1.3.12; 1.4.0 before 1.4.5 |
| CVE-2023-5631 In wildKEV | 5.4 | Oct 18 | Stored XSS vulnerability in Roundcube Affected: before 1.4.15; 1.5.0 before 1.5.5; 1.6.0 before 1.6.4 |
Showing 6