BLACKOUT MAP

Roundcube: vulnerabilidades exploradas

AdicionadoVulnerabilidadeProdutoGravidadeChance de ataque
20 de fev. de 2026Cross-site ScriptingCVE-2025-68461WebmailAlto 7,227%
20 de fev. de 2026Deserialization of Untrusted DataCVE-2025-49113WebmailCrítica 9,999,7%
9 de jun. de 2025Cross-Site ScriptingCVE-2024-42009WebmailCrítica 9,383%
24 de out. de 2024Cross-Site Scripting (XSS)CVE-2024-37383WebmailMédia 6,174%
26 de jun. de 2024Cross-Site Scripting (XSS)CVE-2020-13965WebmailMédia 6,377%
12 de fev. de 2024Persistent Cross-Site Scripting (XSS)CVE-2023-43770WebmailMédia 6,164%
26 de out. de 2023Persistent Cross-Site Scripting (XSS)CVE-2023-5631WebmailMédia 6,177%
22 de jun. de 2023Webmail SQL InjectionCVE-2021-44026Roundcube WebmailCrítica 9,870%
22 de jun. de 2023Webmail Cross-Site Scripting (XSS)CVE-2020-35730Roundcube WebmailMédia 6,133%
22 de jun. de 2023Webmail Remote Code ExecutionCVE-2020-12641Roundcube WebmailCrítica 9,884%
3 de nov. de 2021Webmail File DisclosureCVE-2017-16651Roundcube WebmailAlto 7,846%

Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.