Apache Software Foundation Apache SpamAssassin
6 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1946 | Apache SpamAssassin – < 3.4.5 | Apache SpamAssassin has an OS Command Injection vulnerability | CRITICAL 9.8 | 6.1 % | ||
| CVE-2020-1930 | prior to 3.4.3 | A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration (.cf) files can be | HIGH 8.1 | 7.1 % | ||
| CVE-2020-1931 | prior to 3.4.3 | A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.cf) files can be conf | HIGH 8.1 | 6.5 % | ||
| CVE-2018-11781 | before 3.4.2 | Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax. | HIGH 7.8 | 1.0 % | ||
| CVE-2018-11780 | before 3.4.2 | A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2. | CRITICAL 9.8 | 11 % | ||
| CVE-2017-15705 | all modern versions before 3.4.2 | A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain uncl | MEDIUM 5.3 | 7.9 % |