linagora records
7 published records for vendor linagora.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-307 Improper Restriction of Excessive Authentication Attempts2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-1665Proof of concept | Improper Restriction of Excessive Authentication Attempts in linagora/twakelinagora · twake · CWE-307 | Critical9.8 | — | 0.6% | Mar 27, 2023 |
39Monitor | CVE-2023-2675No exploit | Improper Restriction of Excessive Authentication Attempts in linagora/twakelinagora · twake · CWE-307 | Critical9.8 | — | 0.5% | Nov 7, 2023 |
39Monitor | CVE-2025-70039No exploit | An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1linagora · twake · CWE-78 | Critical9.8 | — | 0.4% | Mar 9, 2026 |
38Monitor | CVE-2023-0028No exploit | Cross-site Scripting (XSS) - Stored in linagora/twakelinagora · twake · CWE-79 | Medium5.4 | — | 56.0% | Dec 31, 2022 |
35Monitor | CVE-2025-70038No exploit | An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223.linagora · twake · CWE-79 | High8.8 | — | 0.3% | Mar 9, 2026 |
31Monitor | CVE-2019-1010205No exploit | LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal.linagora · hublin · CWE-22 | High7.5 | — | 2.7% | Jul 23, 2019 |
24Monitor | CVE-2025-70037No exploit | An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223.linagora · twake · CWE-601 | Medium6.1 | — | 0.2% | Mar 9, 2026 |
- CVE-2023-166539Monitor
Improper Restriction of Excessive Authentication Attempts in linagora/twake
CriticalCVSS 9.8Proof of conceptEPSS 0%linagora · twakeMar 27, 2023
- CVE-2023-267539Monitor
Improper Restriction of Excessive Authentication Attempts in linagora/twake
CriticalCVSS 9.8No exploitEPSS 0%linagora · twakeNov 7, 2023
- CVE-2025-7003939Monitor
An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1
CriticalCVSS 9.8No exploitEPSS 0%linagora · twakeMar 9, 2026
- CVE-2023-002838Monitor
Cross-site Scripting (XSS) - Stored in linagora/twake
MediumCVSS 5.4No exploitEPSS 56%linagora · twakeDec 31, 2022
- CVE-2025-7003835Monitor
An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223.
HighCVSS 8.8No exploitEPSS 0%linagora · twakeMar 9, 2026
- CVE-2019-101020531Monitor
LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal.
HighCVSS 7.5No exploitEPSS 2%linagora · hublinJul 23, 2019
- CVE-2025-7003724Monitor
An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223.
MediumCVSS 6.1No exploitEPSS 0%linagora · twakeMar 9, 2026