Apache Apache SpamAssassin vulnerabilities

2 published CVEs name Apache Apache SpamAssassin among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 0
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 0Not scored 0

Newest CVEs

CVE-2019-12420
In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended…
Apache · Apache SpamAssassin
High7.5
CVE-2018-11805
In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be…
Apache · Apache SpamAssassin
Medium6.7

Most common weaknesses