[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fldAJ7xTqtmG04g9xWHUnIJnprUiwCJzfTHi3FHRL1Ss":3,"g5a-ex:roundcube\u002Froundcube_webmail@*":115,"g5a-family:roundcube\u002Froundcube_webmail":117},{"success":4,"data":5},true,{"product":6,"versions":42,"topVulnerabilitiesByEpss":55,"kevVulnerabilities":92,"seoMetadata":93,"meta":112},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":41},"roundcube","roundcube_webmail",12,7,0,"2017-05-23",[14,17,19,22,24,27,29,31,33,35,37,39],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.8",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.1",{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},"1.1.0",2,{"version":23,"cve_count":10,"kev_count":11,"has_kev":16},"1.1.1",{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},"1.1.2",3,{"version":28,"cve_count":26,"kev_count":11,"has_kev":16},"1.1.3",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.4",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.7",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.1",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.2",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.3","Roundcube Webmail by Roundcube is a technology product with 12 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[43,44,45,46,47,48,49,50,51,52,53,54],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},{"version":23,"cve_count":10,"kev_count":11,"has_kev":16},{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},{"version":28,"cve_count":26,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},[56,64,68,74,79,84,88],{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":16,"epssScore":63},"CVE-2015-8770","Directory traversal vulnerability in the set_skin function in program\u002Finclude\u002Frcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. (dot dot) in the _skin parameter to index.php.","2016-01-29",7.5,"v3.0","High",0.22425,{"cveId":65,"description":66,"publishedDate":12,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":16,"epssScore":67},"CVE-2015-5383","Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, or (3) logs directory.",0.03828,{"cveId":69,"description":70,"publishedDate":12,"cvssScore":71,"cvssVersion":61,"severity":72,"isKev":16,"epssScore":73},"CVE-2015-5382","program\u002Fsteps\u002Faddressbook\u002Fphoto.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the _alt parameter when uploading a vCard.",6.5,"Medium",0.02925,{"cveId":75,"description":76,"publishedDate":12,"cvssScore":77,"cvssVersion":61,"severity":72,"isKev":16,"epssScore":78},"CVE-2015-5381","Cross-site scripting (XSS) vulnerability in program\u002Finclude\u002Frcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to the default URI.",6.1,0.02702,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":77,"cvssVersion":61,"severity":72,"isKev":16,"epssScore":83},"CVE-2015-8864","Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068.","2017-04-13",0.02691,{"cveId":85,"description":86,"publishedDate":82,"cvssScore":77,"cvssVersion":61,"severity":72,"isKev":16,"epssScore":87},"CVE-2016-4068","Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864.",0.02501,{"cveId":89,"description":90,"publishedDate":59,"cvssScore":71,"cvssVersion":61,"severity":72,"isKev":16,"epssScore":91},"CVE-2015-8794","Absolute path traversal vulnerability in program\u002Fsteps\u002Faddressbook\u002Fphoto.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the _alt parameter, related to contact photo handling.",0.02119,[],{"title":94,"metaDescription":95,"keywords":96,"structuredData":97},"Roundcube Webmail by Roundcube - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Roundcube Webmail by Roundcube covering 12 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Roundcube Webmail vulnerabilities, Roundcube Webmail security, Roundcube Webmail CVE, Roundcube Roundcube Webmail, Roundcube Webmail threat intelligence, Roundcube security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":98,"@type":99,"name":100,"description":95,"url":101,"manufacturer":102,"applicationCategory":106,"softwareVersion":107,"mainEntity":108},"https:\u002F\u002Fschema.org","SoftwareApplication","Roundcube Webmail","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Froundcube\u002Froundcube_webmail",{"@type":103,"name":104,"url":105},"Organization","Roundcube","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Froundcube","Security Software","12 versions tracked",{"@type":109,"name":110,"description":111,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Roundcube Webmail Security Vulnerabilities","Security vulnerabilities affecting Roundcube Webmail by Roundcube",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":113,"apiVersion":114},"2026-10-17T15:20:21.600Z","3.0",{"rows":116,"total":11,"capped":16,"failed":11},[],[]]