Known vulnerabilities in roundcube (Debian package) 1.2.3+dfsg.1-4+deb9u4

Vendor: Debian
Version: 1.2.3+dfsg.1-4+deb9u4
Software CPE: cpe:2.3:o:debian:roundcube_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 6.9

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting roundcube (Debian package) version 1.2.3+dfsg.1-4+deb9u4 roundcube (Debian package) 1.2.3+dfsg.1-4+deb9u4 is affected by 3 vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15562
CWE-79 Medium
No
No
1.3.14+dfsg.1-1~deb10u1 09.07.2020 SB2020070909
SB2020070910
SB2020092414
#VU28979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13965
CWE-79 Medium
No
Exploited
1.2.3+dfsg.1-4+deb9u5, 1.3.13+dfsg.1-1~deb10u1 11.06.2020 SB2020061115
SB2020061116
SB2020060828
and 1 more
#VU28978 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13964
CWE-79 Medium
No
No
1.2.3+dfsg.1-4+deb9u5, 1.3.13+dfsg.1-1~deb10u1 11.06.2020 SB2020061115
SB2020061116
SB2020060828
and 1 more