All products

Red Hat Enterprise Linux 5/mailman

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Moderate severity vulnerability that affects mailmanCVE-2018-13796 · GHSA-XQVG-XM9M-P2C4Version ranges need review. mailmanRed Hat Enterprise Linux 5/mailman PyPIRed Hat Medium Fix reported
mailman: Local users able to read private mailing list archivesCVE-2002-0389 Red Hat Enterprise Linux 4/mailmanRed Hat Enterprise Linux 5/mailman Red Hat Low No fix reported
mailman: directory traversal in MTA transports that deliver programmaticallyCVE-2015-2775 Red Hat Enterprise Linux 5/mailman Red Hat Medium No fix reported
mailman: CSRF protection missing in the user options pageCVE-2016-6893 Red Hat Enterprise Linux 5/mailmanRed Hat Enterprise Linux 6/mailman Red Hat Medium No fix reported
mailman: Missing CSRF protection in admin web interfaceCVE-2016-7123 Red Hat Enterprise Linux 5/mailmanRed Hat Enterprise Linux 6/mailman Red Hat Medium No fix reported
mailman: Cross-site scripting (XSS) vulnerability in web UICVE-2018-5950 Red Hat Enterprise Linux 5/mailman Red Hat Medium No fix reported
mailman: Cross-site scripting vulnerability allows malicious listowners to inject scripts into listinfo pagesCVE-2018-0618 Red Hat Enterprise Linux 5/mailmanRed Hat Enterprise Linux 6/mailman Red Hat Medium No fix reported
mailman: XSS via file attachments in list archivesCVE-2020-12137 Red Hat Enterprise Linux 5/mailmanRed Hat Enterprise Linux 6/mailman Red Hat Medium No fix reported
mailman: arbitrary content injection via the options login pageCVE-2020-12108 Red Hat Enterprise Linux 5/mailmanRed Hat Enterprise Linux 6/mailman Red Hat Medium No fix reported
mailman: arbitrary content injection via the private archive login pageCVE-2020-15011 Red Hat Enterprise Linux 5/mailmanRed Hat Enterprise Linux 6/mailman Red Hat Medium No fix reported