Roundcube

Records129All Threatist records

Exploited (KEV)11In CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high34CVSS 7.0–8.9

Exploited now

Roundcube records in CISA KEV

TI-2025-31204 RoundCube Webmail Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2026-02-20 TI-2025-41994 RoundCube Webmail Cross-site Scripting Vulnerability CRITICAL 91KEV 2026-02-20 TI-2024-28025 RoundCube Webmail Cross-Site Scripting Vulnerability CRITICAL 99KEV 2025-06-09 TI-2024-24889 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability HIGH 84KEV 2024-10-24 TI-2020-10941 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability CRITICAL 85KEV 2024-06-26 TI-2023-23468 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability HIGH 84KEV 2024-02-12

Components

Products in the NVD configurations · select one to filter the records

Webmail 113 records CRITICAL Roundcube Webmail 7 records MEDIUM Roundcube 1 record LOW

Records

1 record in Roundcube · all components

TI-2021-21077 CVE-2021-46144 · GHSA-8373-wxqf-ph2h

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with…

LOW 29

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01079 Published 2022-01-06 No fix listed CWE-79

Open these records in search →