Vendors / cyrusimap Records 20 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now cyrusimap records in CISA KEV No cyrusimap vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04123 · Published 2022-02-23 · Partial fix CWE-89
Priority MEDIUM 44
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.08036 · Published 2019-12-19 · Partial fix CWE-193
Open these records in search → All records by CVSS severity
1 3 12 4 0
