Known vulnerabilities in mailman (Red Hat package)
Vendor:
Red Hat Inc.
Software:
mailman (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:mailman_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Breakdown by Severity Chart
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU58503 - Cross-Site Request Forgery (CSRF) CVE-2021-44227 |
CWE-352 | Medium | 2.1.15-30.el7_9.2 | 03.12.2021 |
SB2021120305 SB2021120306 SB2021120314 and 12 more |
||
| #VU58347 - Cross-Site Request Forgery (CSRF) CVE-2021-42097 |
CWE-352 | Medium | 2.1.15-30.el7_9.2 | 24.11.2021 |
SB2021112405 SB2021112417 SB2021112419 and 10 more |
||
| #VU14330 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2018-13796 |
CWE-451 | Low | 2.1.15-30.el7 | 13.08.2018 |
SB2018081314 SB2018081315 SB2019040811 and 5 more |
||
| #VU13585 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-0618 |
CWE-79 | Low | 2.1.15-30.el7 | 30.06.2018 |
SB2018070505 SB2018063003 SB2018071601 and 7 more |
||
| #VU365 - Cross-Site Request Forgery (CSRF) CVE-2016-6893 |
CWE-352 | Medium | 2.1.15-30.el7_9.2 | 07.09.2016 |
SB2016090702 SB2018040606 SB2021120306 and 3 more |