alinto sogo vulnerabilities in 2024, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 6.1CVE-2024-24510EPSS 0.5%2024-09-09

   Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component.

2. 6.1CVE-2024-34462EPSS 0.3%2024-05-04

   Alinto SOGo through 5.10.0 allows XSS during attachment preview.

3. 6.1CVE-2023-48104EPSS 1.0%2024-01-16

   Alinto SOGo before 5.9.1 is vulnerable to HTML Injection.