Vulnerability Name:

CVE-2020-15562 (CCN-184640)

Assigned:2020-06-03
Published:2020-06-03
Updated:2023-01-20
Summary:
CVSS v3 Severity:6.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
5.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:H/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
6.1 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
5.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:H/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
5.5 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
Vulnerability Consequences:Cross-Site Scripting
References:Source: MITRE
Type: CNA
CVE-2020-15562

Source: cve@mitre.org
Type: Broken Link
cve@mitre.org

Source: XF
Type: UNKNOWN
roundcube-cve202015562-xss(184640)

Source: CCN
Type: Roundcube Webmail GIT Repository
Fix XSS issue in template object 'username' (#7406)

Source: CCN
Type: Roundcube Webmail GIT Repository
Fix cross-site scripting (XSS) via HTML messages with malicious svg/n

Source: cve@mitre.org
Type: Patch, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Release Notes, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Release Notes, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Release Notes, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2020-15562

Vulnerable Configuration:Configuration CCN 1:
  • cpe:/a:roundcube:webmail:1.4.6:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:202015562
    V
    		CVE-2020-15562
    2022-05-22
    oval:org.opensuse.security:def:64835
    P
    		Security update for systemd (Moderate)
    2022-01-11
    oval:org.opensuse.security:def:64625
    P
    		Security update for xen (Moderate)
    2021-12-03
    oval:org.opensuse.security:def:64626
    P
    		Security update for aaa_base (Moderate)
    2021-12-03
    oval:org.opensuse.security:def:64893
    P
    		Security update for containerd, docker, runc (Important)
    2021-10-25
    oval:org.opensuse.security:def:63484
    P
    		libgstaudio-1_0-0-32bit-1.16.2-2.12 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63346
    P
    		librelp-devel-1.2.15-1.15 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:64733
    P
    		Security update for the Linux Kernel (Important)
    2021-07-20
    oval:org.opensuse.security:def:64533
    P
    		Security update for salt (Critical)
    2021-06-21
    oval:org.opensuse.security:def:62865
    P
    		ocaml-libguestfs-devel-1.38.0-3.52 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:64489
    P
    		Security update for p7zip (Moderate)
    2021-05-04
    oval:org.opensuse.security:def:63078
    P
    		reiserfs-kmp-default-4.12.14-195.1 on GA media (Moderate)
    2021-04-29
    oval:org.opensuse.security:def:64277
    P
    		Security update for gcc7 (Moderate)
    2020-12-10
    oval:org.opensuse.security:def:63110
    P
    		rmt-server-pubcloud-1.2.2-1.15 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63581
    P
    		imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62665
    P
    		libdjvulibre-devel-3.5.27-9.28 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62664
    P
    		libcolord-gtk-devel-0.1.26-1.48 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63085
    P
    		ntp-4.2.8p13-4.6.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63288
    P
    		nginx-1.16.1-1.21 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62688
    P
    		libopenjpeg1-1.5.2-2.28 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63144
    P
    		bind-9.11.2-10.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63082
    P
    		libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:74947
    P
    		Security update for tigervnc (Important)
    2020-12-01
    oval:org.opensuse.security:def:64379
    P
    		librsync-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64037
    P
    		Security update for git (Important)
    2020-12-01
    oval:org.opensuse.security:def:63931
    P
    		Security update for mailman (Important)
    2020-12-01
    oval:org.opensuse.security:def:74599
    P
    		Security update for roundcubemail (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:65005
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:63710
    P
    		Security update for openssh (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:75080
    P
    		Security update for roundcubemail (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64421
    P
    		openslp on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64171
    P
    		Security update for u-boot (Important)
    2020-12-01
    oval:org.opensuse.security:def:63784
    P
    		Security update for nmap (Important)
    2020-12-01
    oval:org.opensuse.security:def:74473
    P
    		Security update for phpMyAdmin (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64160
    P
    		Security update for bcm43xx-firmware (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:100237
    P
    		 (Moderate)
    2020-10-28
    oval:org.opensuse.security:def:96367
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    oval:org.opensuse.security:def:110775
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    oval:org.opensuse.security:def:109714
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    oval:org.opensuse.security:def:103057
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    oval:org.opensuse.security:def:93524
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    oval:org.opensuse.security:def:110223
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    BACK
    roundcube webmail 1.4.6