cyrusimap

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

cyrusimap records in CISA KEV

No cyrusimap vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cyrus-sasl 2 records MEDIUM Cyrus Imap 2 records LOW Cyrus Sasl 1 record MEDIUM

Records

2 records in Cyrus Imap · all components

TI-2017-09510 CVE-2017-12843 · GHSA-7gjp-mccf-jrm5

Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via…

LOW 31

Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRESTORE command.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01227 Published 2017-08-22 No fix listed CWE-20

TI-2024-22515 CVE-2024-34055 · GHSA-crp5-539g-qwq6

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to…

LOW 30

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00836 Published 2024-06-05 Partial fix CWE-770

Open these records in search →

Critical	1
High	3
Medium	12
Low	4
No CVSS	0