Roundcube
11 CVEs in CISA KEV
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2025-49113 |
Webmail | — | 0.9971 | 2026-02-20 | 2026-03-13 | RoundCube Webmail contains a deserialization of untrusted data vulnerability tha | |
CVE-2024-42009 |
Webmail | — | 0.8288 | 2025-06-09 | 2025-06-30 | RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerabil | |
CVE-2023-5631 |
Webmail | — | 0.7634 | 2023-10-26 | 2023-11-16 | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability | |
CVE-2024-37383 |
Webmail | — | 0.7399 | 2024-10-24 | 2024-11-14 | RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the han | |
CVE-2023-43770 |
Webmail | — | 0.6366 | 2024-02-12 | 2024-03-04 | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability | |
CVE-2025-68461 |
Webmail | — | 0.2741 | 2026-02-20 | 2026-03-13 | RoundCube Webmail contains a cross-site scripting vulnerability via the animate | |
CVE-2020-13965 |
Webmail | — | — | 2024-06-26 | 2024-07-17 | Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allow | |
CVE-2020-35730 |
Roundcube Webmail | — | — | 2023-06-22 | 2023-07-13 | Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allow | |
CVE-2020-12641 |
Roundcube Webmail | — | — | 2023-06-22 | 2023-07-13 | Roundcube Webmail contains an remote code execution vulnerability that allows at | |
CVE-2021-44026 |
Roundcube Webmail | — | — | 2023-06-22 | 2023-07-13 | Roundcube Webmail is vulnerable to SQL injection via search or search_params. | |
CVE-2017-16651 |
Roundcube Webmail | — | — | 2021-11-03 | 2022-05-03 | Roundcube Webmail contains a file disclosure vulnerability caused by insufficien |