Roundcube Vulnerabilidad

Cronología

Escribe

Mail Client Software	40

Producto

RoundCube Webmail	22
Roundcube Webmail	14
Roundcube webmail	4

Contramedidas

Official Fix	32
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	8

Explotabilidad

High	2
Functional	0
Proof-of-Concept	4
Unproven	0
Not Defined	34

Vector de acceso

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	40

Autenticación

Not Defined	0
High	0
Low	8
None	32

La interacción del usuario

Not Defined	0
Required	24
None	16

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	10
≤6	8
≤7	10
≤8	4
≤9	2
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	6
≤5	10
≤6	8
≤7	12
≤8	0
≤9	2
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	6
≤5	12
≤6	8
≤7	6
≤8	4
≤9	2
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	6
≤8	6
≤9	2
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	18
<2k	16
<5k	6
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	40
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (3): Mail (2), Webmail (34), webmail (4)

Fecha de publicación	Base	Temp	Vulnerabilidad	Prod	Exp	Con	EPSS	CTI	CVE
2021-06-25	3.5	3.4	RoundCube Mail SMTP Configuration test.php cross site scripting	Mail Client Software	Not Defined	Official Fix	0.00115	0.00	CVE-2020-18671
2021-06-25	3.5	3.4	RoundCube Mail Database test.php cross site scripting	Mail Client Software	Not Defined	Official Fix	0.00115	0.00	CVE-2020-18670
2020-12-29	3.5	3.5	RoundCube Webmail Email Message rcube_string_replacer.php linkref_addindex cross site scripting	Mail Client Software	Not Defined	Official Fix	0.00612	0.00	CVE-2020-35730
2020-05-04	8.5	8.2	RoundCube Webmail Config Setting rcube_image.php escalada de privilegios	Mail Client Software	Not Defined	Official Fix	0.09119	0.04	CVE-2020-12641
2020-05-04	8.5	8.2	RoundCube Webmail rcube_plugin_api.php directory traversal	Mail Client Software	Not Defined	Official Fix	0.01163	0.00	CVE-2020-12640
2020-05-04	5.0	4.8	RoundCube Webmail cross site request forgery	Mail Client Software	Not Defined	Official Fix	0.03063	0.03	CVE-2020-12626
2020-05-04	5.2	4.9	RoundCube Webmail rcube_washtml.php cross site scripting	Mail Client Software	Not Defined	Official Fix	0.00504	0.03	CVE-2020-12625
2018-03-13	6.4	6.3	RoundCube Webmail iRedMail Key escalada de privilegios	Mail Client Software	Not Defined	Official Fix	0.00563	0.04	CVE-2018-1000072
2017-07-17	3.5	3.3	RoundCube Webmail Persistent cross site scripting	Mail Client Software	Not Defined	Not Defined	0.00266	0.01	CVE-2017-1000049
2017-05-23	6.4	6.3	RoundCube Webmail divulgación de información	Mail Client Software	Not Defined	Official Fix	0.00379	0.02	CVE-2015-5383

30 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 30 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!