CVE-2020-13965.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.

EXPLOITATION STATUSCISA known exploitedAdded Jun 26, 2024

RECORD STATUSAwaiting NVD dataModified Jun 26, 2024

Disclosure summary

Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.

CISA remediation guidance

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Original records & references

NIST NVD record
CVE Program record
CISA KEV catalog entry

PUBLISHED 2024-06-26T00:00:00-04:00
MODIFIED 2024-06-26T00:00:00-04:00
INGESTED 2026-10-06T11:42:57-04:00