Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2021-44026
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.702
EPSS Ranking
98.6%
CVSS Severity
CVSS v3 Score
9.8
CVSS v2 Score
7.5
Proposed Action
Roundcube Webmail is vulnerable to SQL injection via search or search_params.
Ransomware Campaign
Unknown
References
https://bugs.debian.org/1000156
https://github.com/roundcube/roundcubemail/commit/c8947ecb762d9e89c2091bda28d49002817263f1
https://github.com/roundcube/roundcubemail/commit/ee809bde2dcaa04857a919397808a7296681dcfa
https://lists.debian.org/debian-lts-announce/2021/12/msg00004.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDVGIZMQJ5IOM47Y3SAAJRN5VPANKTKO/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TP3Y5RXTUUOUODNG7HFEKWYNIPIT2NL4/
https://www.debian.org/security/2021/dsa-5013
https://bugs.debian.org/1000156
https://github.com/roundcube/roundcubemail/commit/c8947ecb762d9e89c2091bda28d49002817263f1
https://github.com/roundcube/roundcubemail/commit/ee809bde2dcaa04857a919397808a7296681dcfa
https://lists.debian.org/debian-lts-announce/2021/12/msg00004.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDVGIZMQJ5IOM47Y3SAAJRN5VPANKTKO/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TP3Y5RXTUUOUODNG7HFEKWYNIPIT2NL4/
https://www.debian.org/security/2021/dsa-5013
Products affected by CVE-2021-44026
Roundcube
»
Webmail
»
Version:
N/A
cpe:2.3:a:roundcube:webmail:-
Roundcube
»
Webmail
»
Version:
0.1
cpe:2.3:a:roundcube:webmail:0.1
Roundcube
»
Webmail
»
Version:
0.1.1
cpe:2.3:a:roundcube:webmail:0.1.1
Roundcube
»
Webmail
»
Version:
0.2
cpe:2.3:a:roundcube:webmail:0.2
Roundcube
»
Webmail
»
Version:
0.2.1
cpe:2.3:a:roundcube:webmail:0.2.1
Roundcube
»
Webmail
»
Version:
0.2.2
cpe:2.3:a:roundcube:webmail:0.2.2
Roundcube
»
Webmail
»
Version:
0.3
cpe:2.3:a:roundcube:webmail:0.3
Roundcube
»
Webmail
»
Version:
0.3.1
cpe:2.3:a:roundcube:webmail:0.3.1
Roundcube
»
Webmail
»
Version:
0.4
cpe:2.3:a:roundcube:webmail:0.4
Roundcube
»
Webmail
»
Version:
0.4.1
cpe:2.3:a:roundcube:webmail:0.4.1
Roundcube
»
Webmail
»
Version:
0.4.2
cpe:2.3:a:roundcube:webmail:0.4.2
Roundcube
»
Webmail
»
Version:
0.5
cpe:2.3:a:roundcube:webmail:0.5
Roundcube
»
Webmail
»
Version:
0.5.1
cpe:2.3:a:roundcube:webmail:0.5.1
Roundcube
»
Webmail
»
Version:
0.5.2
cpe:2.3:a:roundcube:webmail:0.5.2
Roundcube
»
Webmail
»
Version:
0.5.3
cpe:2.3:a:roundcube:webmail:0.5.3
Roundcube
»
Webmail
»
Version:
0.5.4
cpe:2.3:a:roundcube:webmail:0.5.4
Roundcube
»
Webmail
»
Version:
0.6
cpe:2.3:a:roundcube:webmail:0.6
Roundcube
»
Webmail
»
Version:
0.7
cpe:2.3:a:roundcube:webmail:0.7
Roundcube
»
Webmail
»
Version:
0.7.1
cpe:2.3:a:roundcube:webmail:0.7.1
Roundcube
»
Webmail
»
Version:
0.7.2
cpe:2.3:a:roundcube:webmail:0.7.2
Roundcube
»
Webmail
»
Version:
0.7.3
cpe:2.3:a:roundcube:webmail:0.7.3
Roundcube
»
Webmail
»
Version:
0.7.4
cpe:2.3:a:roundcube:webmail:0.7.4
Roundcube
»
Webmail
»
Version:
0.8.0
cpe:2.3:a:roundcube:webmail:0.8.0
Roundcube
»
Webmail
»
Version:
0.8.1
cpe:2.3:a:roundcube:webmail:0.8.1
Roundcube
»
Webmail
»
Version:
0.8.2
cpe:2.3:a:roundcube:webmail:0.8.2
Roundcube
»
Webmail
»
Version:
0.8.3
cpe:2.3:a:roundcube:webmail:0.8.3
Roundcube
»
Webmail
»
Version:
0.8.4
cpe:2.3:a:roundcube:webmail:0.8.4
Roundcube
»
Webmail
»
Version:
0.8.5
cpe:2.3:a:roundcube:webmail:0.8.5
Roundcube
»
Webmail
»
Version:
0.8.6
cpe:2.3:a:roundcube:webmail:0.8.6
Roundcube
»
Webmail
»
Version:
0.8.7
cpe:2.3:a:roundcube:webmail:0.8.7
Roundcube
»
Webmail
»
Version:
0.9
cpe:2.3:a:roundcube:webmail:0.9
Roundcube
»
Webmail
»
Version:
0.9.0
cpe:2.3:a:roundcube:webmail:0.9.0
Roundcube
»
Webmail
»
Version:
0.9.1
cpe:2.3:a:roundcube:webmail:0.9.1
Roundcube
»
Webmail
»
Version:
0.9.2
cpe:2.3:a:roundcube:webmail:0.9.2
Roundcube
»
Webmail
»
Version:
0.9.3
cpe:2.3:a:roundcube:webmail:0.9.3
Roundcube
»
Webmail
»
Version:
0.9.4
cpe:2.3:a:roundcube:webmail:0.9.4
Roundcube
»
Webmail
»
Version:
0.9.5
cpe:2.3:a:roundcube:webmail:0.9.5
Roundcube
»
Webmail
»
Version:
1.0
cpe:2.3:a:roundcube:webmail:1.0
Roundcube
»
Webmail
»
Version:
1.0.0
cpe:2.3:a:roundcube:webmail:1.0.0
Roundcube
»
Webmail
»
Version:
1.0.1
cpe:2.3:a:roundcube:webmail:1.0.1
Roundcube
»
Webmail
»
Version:
1.0.10
cpe:2.3:a:roundcube:webmail:1.0.10
Roundcube
»
Webmail
»
Version:
1.0.11
cpe:2.3:a:roundcube:webmail:1.0.11
Roundcube
»
Webmail
»
Version:
1.0.12
cpe:2.3:a:roundcube:webmail:1.0.12
Roundcube
»
Webmail
»
Version:
1.0.2
cpe:2.3:a:roundcube:webmail:1.0.2
Roundcube
»
Webmail
»
Version:
1.0.3
cpe:2.3:a:roundcube:webmail:1.0.3
Roundcube
»
Webmail
»
Version:
1.0.4
cpe:2.3:a:roundcube:webmail:1.0.4
Roundcube
»
Webmail
»
Version:
1.0.5
cpe:2.3:a:roundcube:webmail:1.0.5
Roundcube
»
Webmail
»
Version:
1.0.6
cpe:2.3:a:roundcube:webmail:1.0.6
Roundcube
»
Webmail
»
Version:
1.0.7
cpe:2.3:a:roundcube:webmail:1.0.7
Roundcube
»
Webmail
»
Version:
1.0.8
cpe:2.3:a:roundcube:webmail:1.0.8
Roundcube
»
Webmail
»
Version:
1.0.9
cpe:2.3:a:roundcube:webmail:1.0.9
Roundcube
»
Webmail
»
Version:
1.1
cpe:2.3:a:roundcube:webmail:1.1
Roundcube
»
Webmail
»
Version:
1.1.0
cpe:2.3:a:roundcube:webmail:1.1.0
Roundcube
»
Webmail
»
Version:
1.1.1
cpe:2.3:a:roundcube:webmail:1.1.1
Roundcube
»
Webmail
»
Version:
1.1.10
cpe:2.3:a:roundcube:webmail:1.1.10
Roundcube
»
Webmail
»
Version:
1.1.11
cpe:2.3:a:roundcube:webmail:1.1.11
Roundcube
»
Webmail
»
Version:
1.1.12
cpe:2.3:a:roundcube:webmail:1.1.12
Roundcube
»
Webmail
»
Version:
1.1.2
cpe:2.3:a:roundcube:webmail:1.1.2
Roundcube
»
Webmail
»
Version:
1.1.3
cpe:2.3:a:roundcube:webmail:1.1.3
Roundcube
»
Webmail
»
Version:
1.1.4
cpe:2.3:a:roundcube:webmail:1.1.4
Roundcube
»
Webmail
»
Version:
1.1.5
cpe:2.3:a:roundcube:webmail:1.1.5
Roundcube
»
Webmail
»
Version:
1.1.6
cpe:2.3:a:roundcube:webmail:1.1.6
Roundcube
»
Webmail
»
Version:
1.1.7
cpe:2.3:a:roundcube:webmail:1.1.7
Roundcube
»
Webmail
»
Version:
1.1.8
cpe:2.3:a:roundcube:webmail:1.1.8
Roundcube
»
Webmail
»
Version:
1.1.9
cpe:2.3:a:roundcube:webmail:1.1.9
Roundcube
»
Webmail
»
Version:
1.2
cpe:2.3:a:roundcube:webmail:1.2
Roundcube
»
Webmail
»
Version:
1.2.0
cpe:2.3:a:roundcube:webmail:1.2.0
Roundcube
»
Webmail
»
Version:
1.2.1
cpe:2.3:a:roundcube:webmail:1.2.1
Roundcube
»
Webmail
»
Version:
1.2.10
cpe:2.3:a:roundcube:webmail:1.2.10
Roundcube
»
Webmail
»
Version:
1.2.11
cpe:2.3:a:roundcube:webmail:1.2.11
Roundcube
»
Webmail
»
Version:
1.2.12
cpe:2.3:a:roundcube:webmail:1.2.12
Roundcube
»
Webmail
»
Version:
1.2.13
cpe:2.3:a:roundcube:webmail:1.2.13
Roundcube
»
Webmail
»
Version:
1.2.2
cpe:2.3:a:roundcube:webmail:1.2.2
Roundcube
»
Webmail
»
Version:
1.2.3
cpe:2.3:a:roundcube:webmail:1.2.3
Roundcube
»
Webmail
»
Version:
1.2.4
cpe:2.3:a:roundcube:webmail:1.2.4
Roundcube
»
Webmail
»
Version:
1.2.5
cpe:2.3:a:roundcube:webmail:1.2.5
Roundcube
»
Webmail
»
Version:
1.2.6
cpe:2.3:a:roundcube:webmail:1.2.6
Roundcube
»
Webmail
»
Version:
1.2.7
cpe:2.3:a:roundcube:webmail:1.2.7
Roundcube
»
Webmail
»
Version:
1.2.8
cpe:2.3:a:roundcube:webmail:1.2.8
Roundcube
»
Webmail
»
Version:
1.2.9
cpe:2.3:a:roundcube:webmail:1.2.9
Roundcube
»
Webmail
»
Version:
1.3
cpe:2.3:a:roundcube:webmail:1.3
Roundcube
»
Webmail
»
Version:
1.3.0
cpe:2.3:a:roundcube:webmail:1.3.0
Roundcube
»
Webmail
»
Version:
1.3.1
cpe:2.3:a:roundcube:webmail:1.3.1
Roundcube
»
Webmail
»
Version:
1.3.10
cpe:2.3:a:roundcube:webmail:1.3.10
Roundcube
»
Webmail
»
Version:
1.3.11
cpe:2.3:a:roundcube:webmail:1.3.11
Roundcube
»
Webmail
»
Version:
1.3.12
cpe:2.3:a:roundcube:webmail:1.3.12
Roundcube
»
Webmail
»
Version:
1.3.13
cpe:2.3:a:roundcube:webmail:1.3.13
Roundcube
»
Webmail
»
Version:
1.3.14
cpe:2.3:a:roundcube:webmail:1.3.14
Roundcube
»
Webmail
»
Version:
1.3.15
cpe:2.3:a:roundcube:webmail:1.3.15
Roundcube
»
Webmail
»
Version:
1.3.16
cpe:2.3:a:roundcube:webmail:1.3.16
Roundcube
»
Webmail
»
Version:
1.3.2
cpe:2.3:a:roundcube:webmail:1.3.2
Roundcube
»
Webmail
»
Version:
1.3.3
cpe:2.3:a:roundcube:webmail:1.3.3
Roundcube
»
Webmail
»
Version:
1.3.4
cpe:2.3:a:roundcube:webmail:1.3.4
Roundcube
»
Webmail
»
Version:
1.3.5
cpe:2.3:a:roundcube:webmail:1.3.5
Roundcube
»
Webmail
»
Version:
1.3.6
cpe:2.3:a:roundcube:webmail:1.3.6
Roundcube
»
Webmail
»
Version:
1.3.7
cpe:2.3:a:roundcube:webmail:1.3.7
Roundcube
»
Webmail
»
Version:
1.3.8
cpe:2.3:a:roundcube:webmail:1.3.8
Roundcube
»
Webmail
»
Version:
1.3.9
cpe:2.3:a:roundcube:webmail:1.3.9
Roundcube
»
Webmail
»
Version:
1.4.0
cpe:2.3:a:roundcube:webmail:1.4.0
Roundcube
»
Webmail
»
Version:
1.4.1
cpe:2.3:a:roundcube:webmail:1.4.1
Roundcube
»
Webmail
»
Version:
1.4.10
cpe:2.3:a:roundcube:webmail:1.4.10
Roundcube
»
Webmail
»
Version:
1.4.11
cpe:2.3:a:roundcube:webmail:1.4.11
Roundcube
»
Webmail
»
Version:
1.4.2
cpe:2.3:a:roundcube:webmail:1.4.2
Roundcube
»
Webmail
»
Version:
1.4.3
cpe:2.3:a:roundcube:webmail:1.4.3
Roundcube
»
Webmail
»
Version:
1.4.4
cpe:2.3:a:roundcube:webmail:1.4.4
Roundcube
»
Webmail
»
Version:
1.4.5
cpe:2.3:a:roundcube:webmail:1.4.5
Roundcube
»
Webmail
»
Version:
1.4.6
cpe:2.3:a:roundcube:webmail:1.4.6
Roundcube
»
Webmail
»
Version:
1.4.7
cpe:2.3:a:roundcube:webmail:1.4.7
Roundcube
»
Webmail
»
Version:
1.4.8
cpe:2.3:a:roundcube:webmail:1.4.8
Roundcube
»
Webmail
»
Version:
1.4.9
cpe:2.3:a:roundcube:webmail:1.4.9
Debian
»
Debian Linux
»
Version:
10.0
cpe:2.3:o:debian:debian_linux:10.0
Debian
»
Debian Linux
»
Version:
11.0
cpe:2.3:o:debian:debian_linux:11.0
Debian
»
Debian Linux
»
Version:
9.0
cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject
»
Fedora
»
Version:
33
cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject
»
Fedora
»
Version:
34
cpe:2.3:o:fedoraproject:fedora:34
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved