CVE-2011-3355

7.3 highEPSS 0.8%

High (7.3) in gnome evolution-data-server3. EPSS 0.8% chance of exploitation in the next 30 days.

evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-311
Published: 2019-11-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

gnome:evolution-data-server3

References

https://access.redhat.com/security/cve/cve-2011-3355
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641052
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3355
https://security-tracker.debian.org/tracker/CVE-2011-3355
https://www.openwall.com/lists/oss-security/2011/09/09/1

Check your stack JSON