CVE-2025-63499— SOGo 安全漏洞
一分钟漏洞结论
SOGo是Alinto开源的一个非常快速且可扩展的现代协作套件。它提供日历、地址簿管理和功能齐全的 Webmail 客户端以及资源共享和权限处理。 SOGo 5.12.3版本存在安全漏洞，该漏洞源于theme参数容易受到跨站脚本攻击。
一、 漏洞 CVE-2025-63499 基础信息
漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Vulnerability Description
CVSS Information
Vulnerability Type
Vulnerability Title
Vulnerability Description
CVSS Information
Vulnerability Type
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
二、漏洞 CVE-2025-63499 的公开POC
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2025-63499 的情报信息
CVE-2025-63499 公开利用代码 (1)
CVE-2025-63499 其他参考 (2)
同批安全公告 · n/a · 2025-12-04 · 共 32 条
| CVE-2025-14012 | 4.7 MEDIUM | JIZHICMS SQL注入漏洞 |
| CVE-2025-14011 | 4.7 MEDIUM | JIZHICMS SQL注入漏洞 |
| CVE-2025-14013 | 2.4 LOW | JIZHICMS 代码注入漏洞 |
| CVE-2025-63364 | Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞 | |
| CVE-2025-65899 | Kalmia 安全漏洞 | |
| CVE-2025-66373 | Akamai Ghost 安全漏洞 | |
| CVE-2025-63363 | Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞 | |
| CVE-2025-63361 | Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞 | |
| CVE-2025-63362 | Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞 | |
| CVE-2025-65637 | Logrus 安全漏洞 | |
| CVE-2025-65806 | e-point CMS 安全漏洞 | |
| CVE-2025-29268 | ALLNET ALL-RUT22GW v3.3.8 安全漏洞 | |
| CVE-2025-29269 | ALLNET ALL-RUT22GW 安全漏洞 | |
| CVE-2025-65883 | Genexis Platinum P4410 安全漏洞 | |
| CVE-2025-63896 | JXL 9 Inch Car Android Double Din Player 安全漏洞 | |
| CVE-2025-55948 | X-SpringBoot 安全漏洞 | |
| CVE-2025-65900 | Kalmia 安全漏洞 | |
| CVE-2025-65516 | Seafile Community Edition 安全漏洞 | |
| CVE-2025-61148 | EduplusCampus 安全漏洞 | |
| CVE-2025-57210 | Weitong Mall 安全漏洞 |
显示前 20 条，共 32 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2025-63499
匿名用户
2026-04-16 21:22:48Just had a cracking arvo session playing crash casino games and honestly reckon it's pure adrenaline when you actually know when to cash out. Gave a crack <a href="https://rootskitchen.bar/">Vegazone online</a> this time and was pretty happy. Funded my account with Visa and noticed they also take PayID which is good to know. The multiplier climb gets your heart pumping — you have to keep your cool while also know when to bail. Unlike Mines, Plinko which I've also punted on, crash gives you that live decision-making buzz. Solid site for locals — have a squiz at https://rootskitchen.bar
匿名用户
2026-04-18 06:00:33Just wrapped up a deadly arvo session punting on the crash format and honestly reckon nothing beats the rush when you work out the right time to cash out. Gave a crack <a href="https://rootskitchen.bar/">Vegazone casino</a> this time and was stoked. Funded my account with Visa and saw they also take Apple Pay which is good to know. The whole crash format is addictive as hell — you have to keep your cool while also know when to bail. Unlike Zeppelin, Goal which I've also punted on, this format gives you that real-time decision-making buzz. Ripper platform for Aussie players — worth a visit at https://rootskitchen.bar