Roundcube
CVEs currently on EVULNABLE's Priority Feed for Roundcube, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 11 Roundcube CVEs in EVULNABLE's ranked feed.
#1 88 Immediate CVE-2025-49113 CISA federal deadline · Overdue by 7 monthsCISA KEV Roundcube — RoundCube Webmail Deserialization of Untrusted Data Vulnerability KEV, EPSS 99.0%
EVRS 88/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#2 83 Urgent CVE-2020-12641 KEV since 2023 · listed over a yearCISA KEV Roundcube — Roundcube Webmail Remote Code Execution Vulnerability KEV, EPSS 84.5%
EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.845.
#3 83 Urgent CVE-2024-42009 KEV since 2025 · listed over a yearCISA KEV Roundcube — RoundCube Webmail Cross-Site Scripting Vulnerability KEV, EPSS 82.9%
EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.829.
#4 79 Urgent CVE-2021-44026 KEV since 2023 · listed over a yearCISA KEV Roundcube — Roundcube Webmail SQL Injection Vulnerability KEV, EPSS 69.9%
EVRS 79/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.699.
#5 76 Urgent CVE-2020-13965 KEV since 2024 · listed over a yearCISA KEV Roundcube — Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability KEV, EPSS 76.6%
EVRS 76/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.766.
#6 76 Urgent CVE-2024-37383 KEV since 2024 · listed over a yearCISA KEV Roundcube — RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability KEV, EPSS 73.3%
EVRS 76/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.733.
#7 75 Urgent CVE-2023-5631 KEV since 2023 · listed over a yearCISA KEV Roundcube — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability KEV, EPSS 75.9%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.759.
#8 75 Urgent CVE-2023-43770 KEV since 2024 · listed over a yearCISA KEV Roundcube — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability KEV, EPSS 63.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.637.
#9 75 Urgent CVE-2017-16651 KEV since 2021 · listed over a yearCISA KEV Roundcube — Roundcube Webmail File Disclosure Vulnerability KEV, EPSS 45.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.457.
#10 75 Urgent CVE-2020-35730 KEV since 2023 · listed over a yearCISA KEV Roundcube — Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability KEV, EPSS 32.9%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.329.
#11 75 Urgent CVE-2025-68461 CISA federal deadline · Overdue by 7 monthsCISA KEV Roundcube — RoundCube Webmail Cross-site Scripting Vulnerability KEV, EPSS 26.8%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.268.