Known vulnerabilities in mailman (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:mailman_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mailman (Debian package) mailman (Debian package) is affected by 5 known vulnerabilities: 4 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58348 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-42096
CWE-338 Medium
No
No
1:2.1.29-1+deb10u2 24.11.2021 SB2021112405
SB2021112417
SB2021112419
and 9 more
#VU58347 - Cross-Site Request Forgery (CSRF)
CVE-2021-42097
CWE-352 Medium
No
No
1:2.1.29-1+deb10u2 24.11.2021 SB2021112405
SB2021112417
SB2021112419
and 10 more
#VU29388 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-15011
CWE-94 Low
No
No
1:2.1.29-1+deb10u2 30.06.2020 SB2020063009
SB2021052038
SB2021110117
and 2 more
#VU28635 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-12108
CWE-451 Medium
No
No
1:2.1.29-1+deb10u2 05.06.2020 SB2020050628
SB2020060501
SB2020051521
and 6 more
#VU27366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12137
CWE-79 Medium
No
No
2.1.23-1+deb9u5, 2.1.29-1+deb10u1 27.04.2020 SB2020042718
SB2020043008
SB2020043015
and 6 more