| Bug | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|
| TEMP-0000000-BD3902 | vulnerable | vulnerable | fixed | fixed | fixed | fixed | sogo SOGoForbidUnknownDomainsAuth issue |
| CVE-2024-34462 | vulnerable | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Alinto SOGo through 5.10.0 allows XSS during attachment preview. |
| CVE-2024-24510 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | fixed | Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows ... |
| CVE-2023-48104 | vulnerable | vulnerable (no DSA, ignored) | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Alinto SOGo before 5.9.1 is vulnerable to HTML Injection. |
| CVE-2022-4558 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | A vulnerability was found in Alinto SOGo up to 5.7.1. It has been clas ... |
| CVE-2022-4556 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as ... |
| CVE-2020-22402 | vulnerable | fixed | fixed | fixed | fixed | fixed | Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 ... |