Known vulnerabilities in spamassassin (Red Hat package)

Known vulnerabilities in spamassassin (Red Hat package)

Vendor: Red Hat Inc.

Software: spamassassin (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:spamassassin_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 5

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (5)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU51703 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-1946	CWE-78	Medium	No	No	3.4.4-4.el8	24.03.2021	SB2021032412 SB2021032901 SB2021040168 and 10 more
#VU24820 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-1931	CWE-78	Medium	No	No	3.4.2-10.el8	02.02.2020	SB2020020201 SB2020020202 SB2020040407 and 4 more
#VU24819 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-1930	CWE-78	Medium	No	No	3.4.2-10.el8	02.02.2020	SB2020020201 SB2020020202 SB2020040407 and 4 more
#VU23601 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2018-11805	CWE-78	Low	No	No	3.4.2-10.el8	13.12.2019	SB2019121311 SB2019121501 SB2020011316 and 4 more
#VU23600 - Improper input validation CVE-2019-12420	CWE-20	Medium	No	No	3.4.0-6.el7, 3.4.2-10.el8	13.12.2019	SB2019121311 SB2019121501 SB2020011316 and 7 more