AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-9587

MEDIUM · CVSS 6.8 EPSS 2.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-01-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-9587
Severity
MEDIUM
CVSS
6.8
EPSS
2.29%

Original NVD Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to (1) address book operations or the (2) ACL or (3) Managesieve plugins.