How many roundcube roundcube webmail CVEs are in CISA KEV?

Yes — 6 of roundcube roundcube webmail's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for roundcube roundcube webmail vulnerabilities?

Yes — 7 of roundcube roundcube webmail's CVEs have a known public exploit.

Which versions of roundcube roundcube webmail are affected?

12 distinct roundcube roundcube webmail versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in roundcube roundcube webmail CVEs?

roundcube roundcube webmail's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

How many critical roundcube roundcube webmail vulnerabilities are there?

roundcube roundcube webmail has 3 critical and 4 high-severity CVEs.

What is the average severity of roundcube roundcube webmail CVEs?

The average CVSS base score across roundcube roundcube webmail's scored CVEs is 7.4.

roundcube webmail Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: roundcube webmail vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

roundcube webmail Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

roundcube webmail has 15 published CVE records since 2016, of which 6 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

Severity and exploitation

How the CVSS severity of roundcube webmail's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High4

Medium8

Low0

In CISA’s Known Exploited Vulnerabilities catalog

6 of roundcube webmail's CVEs are confirmed exploited in the wild.

Public exploits

7 of roundcube webmail's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every roundcube webmail version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.1.1 <= v <= 1.1.17 CVEs
1.1.2 <= v <= 1.1.23 CVEs
1.1.3 <= v <= 1.1.33 CVEs
< 1.5.72 CVEs
<= 1.0.52 CVEs
1.1.0 <= v <= 1.1.02 CVEs
<= 1.0.71 CVE
<= 1.1.101 CVE
1.6.0 <= v < 1.6.71 CVE
1.6.x <= v < 1.6.71 CVE

Fixed in

1.5.72 CVEs

Common weakness types

The CWE weakness categories most often found in roundcube webmail CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many roundcube webmail CVEs were published each year.

2016

2017

2020

2021

2023

2024

Other roundcube products

Browse vulnerabilities for other products by roundcube.

webmail106 CVEs roundcubemail84 CVEs roundcube/roundcubemail10 CVEs roundcube2 CVEs Roundcube Webmail 1.2.x2 CVEs Roundcube Webmail 1.3.x2 CVEs Roundcube Webmail 1.4.x1 CVEs

Frequently asked questions

Common questions about roundcube webmail vulnerabilities.

How many CVEs does roundcube roundcube webmail have?: roundcube roundcube webmail has 15 published CVE records since 2016.
How many roundcube roundcube webmail CVEs are in CISA KEV?: Yes — 6 of roundcube roundcube webmail's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for roundcube roundcube webmail vulnerabilities?: Yes — 7 of roundcube roundcube webmail's CVEs have a known public exploit.
Which versions of roundcube roundcube webmail are affected?: 12 distinct roundcube roundcube webmail versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in roundcube roundcube webmail CVEs?: roundcube roundcube webmail's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How many critical roundcube roundcube webmail vulnerabilities are there?: roundcube roundcube webmail has 3 critical and 4 high-severity CVEs.
What is the average severity of roundcube roundcube webmail CVEs?: The average CVSS base score across roundcube roundcube webmail's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track roundcube webmail vulnerabilities

Get an alert for each new roundcube webmail CVE, with AI-written analysis and remediation steps.

Create an account See pricing