Known vulnerabilities in evolution-data-server (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:evolution-data-server_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting evolution-data-server (Ubuntu package) evolution-data-server (Ubuntu package) is affected by 3 known vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123164 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-2604
CWE-22 Medium
No
No
3.28.5-0ubuntu0.18.04.3+esm1, 3.36.5-0ubuntu1+esm1, 3.44.4-0ubuntu1.2, 3.52.3-0ubuntu1.2, 3.56.2-3ubuntu0.1 24.02.2026 SB2026022414
SB2026022419
SB2026030366
and 7 more
#VU34139 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-14928
CWE-74 Medium
No
No
3.18.5-1ubuntu1.3, 3.28.5-0ubuntu0.18.04.3, 3.36.3-0ubuntu1.1 17.07.2020 SB2020071733
SB2020110511
SB2020071815
and 6 more
#VU17667 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-15587
CWE-451 Low
No
No
3.18.5-1ubuntu1.2, 3.28.5-0ubuntu0.18.04.2 14.02.2019 SB2018092502
SB2019040204
SB2019032809
and 8 more