Known vulnerabilities in roundcube (Debian package) 1.2.3+dfsg.1-4+deb9u2

Vendor: Debian
Version: 1.2.3+dfsg.1-4+deb9u2
Software CPE: cpe:2.3:o:debian:roundcube_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 6.9

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting roundcube (Debian package) version 1.2.3+dfsg.1-4+deb9u2 roundcube (Debian package) 1.2.3+dfsg.1-4+deb9u2 is affected by 5 vulnerabilities: 3 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15562
CWE-79 Medium
No
No
1.3.14+dfsg.1-1~deb10u1 09.07.2020 SB2020070909
SB2020070910
SB2020092414
#VU28979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13965
CWE-79 Medium
No
Exploited
1.2.3+dfsg.1-4+deb9u5, 1.3.13+dfsg.1-1~deb10u1 11.06.2020 SB2020061115
SB2020061116
SB2020060828
and 1 more
#VU28978 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13964
CWE-79 Medium
No
No
1.2.3+dfsg.1-4+deb9u5, 1.3.13+dfsg.1-1~deb10u1 11.06.2020 SB2020061115
SB2020061116
SB2020060828
and 1 more
#VU27500 - Cross-Site Request Forgery (CSRF)
CVE-2020-12626
CWE-352 Low
No
No
1.2.3+dfsg.1-4+deb9u4, 1.3.11+dfsg.1-1~deb10u1, 1.4.4+dfsg.1-1, 1.4.4+dfsg.1-1~bpo10+1 04.05.2020 SB2020050420
SB2020050615
SB2020072722
#VU27498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12625
CWE-79 Low
No
No
1.2.3+dfsg.1-4+deb9u4, 1.3.11+dfsg.1-1~deb10u1, 1.4.4+dfsg.1-1, 1.4.4+dfsg.1-1~bpo10+1 04.05.2020 SB2020050420
SB2020050615
SB2020072722
and 1 more