Iredmail

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 2
    Known Exploited: 0
    0
    Critical Level Threats
    1
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-47227

    iRedAdmin before 2.6 allows XSS, e.g., via order_name.

    Last Modified: Mar 25, 2025
    Published: Sep 23, 2024

    CVE-2018-1000072

    iRedMail version prior to commit f04b8ef contains a Insecure Permissions vulnerability in Roundcube Webmail that can result in Exfiltrate a user's password protected secret GPG key file and other important configuration files.. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in Beta: 0.9.8-BETA1, Stable: 0.9.7.

    Last Modified: Nov 21, 2024
    Published: Mar 13, 2018
    Items Per Page
    Iredmail Vulnerabilities & Security CVEs | CVE-DB