CVE

Id
90887  
CVE No.
CVE-2016-4068  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864.  
Phase
Assigned (20160423)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
782192 90887 CVE-2016-4068 CONFIRM:https://github.com/roundcube/roundcubemail/commit/40d7342dd9c9bd2a1d613edc848ed95a4d71aa18#commitcomment-15294218  View
782193 90887 CVE-2016-4068 CONFIRM:https://github.com/roundcube/roundcubemail/issues/4949  View
782194 90887 CVE-2016-4068 CONFIRM:https://github.com/roundcube/roundcubemail/releases/tag/1.0.9  View
782195 90887 CVE-2016-4068 CONFIRM:https://github.com/roundcube/roundcubemail/releases/tag/1.1.5  View
782196 90887 CVE-2016-4068 CONFIRM:https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115  View
782197 90887 CVE-2016-4068 SUSE:openSUSE-SU-2016:2108  View
782198 90887 CVE-2016-4068 URL:http://lists.opensuse.org/opensuse-updates/2016-08/msg00078.html  View
782199 90887 CVE-2016-4068 SUSE:openSUSE-SU-2016:2109  View
782200 90887 CVE-2016-4068 URL:http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html  View
782201 90887 CVE-2016-4068 SUSE:openSUSE-SU-2016:2127  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3809 JVNDB-2016-004582 HPE XP7 Command View Advanced Edition Suite におけるアクセス制限を回避される脆弱性 HPE XP7 Command View Advanced Edition (CVAE) Suite には、Replication Manager (RepMgr) および Device Manager (DevMgr) が有効になっている場合、アクセス制限を回避される脆弱性が存在します。 CVE-2016-4381 90887 4.4 4.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004582.html  View