Known vulnerabilities in roundcube (Debian package) 1.4.5+dfsg.1-1~bpo10+1

Vendor: Debian
Version: 1.4.5+dfsg.1-1~bpo10+1
Software CPE: cpe:2.3:o:debian:roundcube_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 3
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 6.9

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting roundcube (Debian package) version 1.4.5+dfsg.1-1~bpo10+1 roundcube (Debian package) 1.4.5+dfsg.1-1~bpo10+1 is affected by 3 vulnerabilities: 1 high, 2 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58394 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-44026
CWE-89 High
Public exploit available
Exploited
1.3.17+dfsg.1-1~deb10u1, 1.4.12+dfsg.1-1~deb11u1 27.11.2021 SB2021112701
SB2021112702
SB2021111516
and 2 more
#VU58393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-44025
CWE-79 Medium
No
No
1.3.17+dfsg.1-1~deb10u1, 1.4.12+dfsg.1-1~deb11u1 27.11.2021 SB2021112701
SB2021112702
SB2021111516
and 2 more
#VU29609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15562
CWE-79 Medium
No
No
1.3.14+dfsg.1-1~deb10u1 09.07.2020 SB2020070909
SB2020070910
SB2020092414