RW
Product
Roundcube Webmail
On CISA KEVExploited in the wild
13
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 7Low 0
Watch
Add Roundcube Webmail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44026 In wildKEV | 9.8 | Nov 19 | Roundcube Webmail SQL Injection Vulnerability Affected: All versions, or not specified |
| CVE-2020-12641 In wildKEV | 9.8 | May 4 | Roundcube Webmail Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2024-37385 | 9.8 | Jun 7 | Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via im_convert_path and im_identify_path Affected: before 1.5.7; 1.6.0 before 1.6.7 |
Showing 3