Known vulnerabilities in mailman (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:mailman_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mailman (Ubuntu package) mailman (Ubuntu package) is affected by 10 known vulnerabilities: 5 medium, 5 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58503 - Cross-Site Request Forgery (CSRF)
CVE-2021-44227
CWE-352 Medium
No
No
1:2.1.20-1ubuntu0.6+esm3, 1:2.1.26-1ubuntu0.6, 1:2.1.29-1ubuntu3.1+esm2 03.12.2021 SB2021120305
SB2021120306
SB2021120314
and 12 more
#VU58350 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-43332
CWE-338 Low
No
No
1:2.1.26-1ubuntu0.5, 1:2.1.29-1ubuntu3.1 24.11.2021 SB2021112406
SB2021111823
SB2022053136
and 2 more
#VU58349 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43331
CWE-79 Low
No
No
1:2.1.26-1ubuntu0.5, 1:2.1.29-1ubuntu3.1 24.11.2021 SB2021112406
SB2021111823
SB2022053136
and 2 more
#VU58348 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-42096
CWE-338 Medium
No
No
1:2.1.26-1ubuntu0.4, 1:2.1.26-1ubuntu0.6, 1:2.1.29-1ubuntu3.1 24.11.2021 SB2021112405
SB2021112417
SB2021112419
and 9 more
#VU58347 - Cross-Site Request Forgery (CSRF)
CVE-2021-42097
CWE-352 Medium
No
No
1:2.1.26-1ubuntu0.4, 1:2.1.26-1ubuntu0.6, 1:2.1.29-1ubuntu3.1 24.11.2021 SB2021112405
SB2021112417
SB2021112419
and 10 more
#VU29388 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-15011
CWE-94 Low
No
No
1:2.1.29-1ubuntu3.1 30.06.2020 SB2020063009
SB2021052038
SB2021110117
and 2 more
#VU28635 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-12108
CWE-451 Medium
No
No
1:2.1.29-1ubuntu3.1 05.06.2020 SB2020050628
SB2020060501
SB2020051521
and 6 more
#VU27366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12137
CWE-79 Medium
No
No
1:2.1.20-1ubuntu0.4, 1:2.1.26-1ubuntu0.1, 1:2.1.29-1ubuntu3.1 27.04.2020 SB2020042718
SB2020043008
SB2020043015
and 6 more
#VU14330 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-13796
CWE-451 Low
No
No
1:2.1.20-1ubuntu0.4, 1:2.1.26-1ubuntu0.1 13.08.2018 SB2018081314
SB2018081315
SB2019040811
and 5 more
#VU13585 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0618
CWE-79 Low
No
No
1:2.1.20-1ubuntu0.4, 1:2.1.26-1ubuntu0.1 30.06.2018 SB2018070505
SB2018063003
SB2018071601
and 7 more