CVE-2025-63499
Quick assessment
SOGo是Alinto开源的一个非常快速且可扩展的现代协作套件。它提供日历、地址簿管理和功能齐全的 Webmail 客户端以及资源共享和权限处理。 SOGo 5.12.3版本存在安全漏洞，该漏洞源于theme参数容易受到跨站脚本攻击。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by CompromiseI. Basic Information for CVE-2025-63499
Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Vulnerability Description
CVSS Information
Vulnerability Type
Vulnerability Title
Vulnerability Description
CVSS Information
Vulnerability Type
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2025-63499
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | PoC for CVE-2025-63499 | https://github.com/xryptoh/CVE-2025-63499 | POC Details |
| 2 | POC for CVE-2025-63499 | https://github.com/poblaguev-tot/CVE-2025-63499 | POC Details |
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-63499
Exploits & Public PoCs for CVE-2025-63499 (1)
Other References for CVE-2025-63499 (2)
Same Patch Batch · n/a · 2025-12-04 · 32 CVEs total
| CVE-2025-14012 | 4.7 MEDIUM | JIZHICMS Batch Delete Comments deleteAll.html delete sql injection |
| CVE-2025-14011 | 4.7 MEDIUM | JIZHICMS Add Display Name Field addcomment.html commentlist sql injection |
| CVE-2025-14013 | 2.4 LOW | JIZHICMS Comment addcomment.html cross site scripting |
| CVE-2025-63364 | Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞 | |
| CVE-2025-65899 | Kalmia 安全漏洞 | |
| CVE-2025-66373 | Akamai Ghost 安全漏洞 | |
| CVE-2025-63363 | Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞 | |
| CVE-2025-63361 | Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞 | |
| CVE-2025-63362 | Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞 | |
| CVE-2025-65637 | Logrus 安全漏洞 | |
| CVE-2025-65806 | e-point CMS 安全漏洞 | |
| CVE-2025-29268 | ALLNET ALL-RUT22GW v3.3.8 安全漏洞 | |
| CVE-2025-29269 | ALLNET ALL-RUT22GW 安全漏洞 | |
| CVE-2025-65883 | Genexis Platinum P4410 安全漏洞 | |
| CVE-2025-63896 | JXL 9 Inch Car Android Double Din Player 安全漏洞 | |
| CVE-2025-55948 | X-SpringBoot 安全漏洞 | |
| CVE-2025-65900 | Kalmia 安全漏洞 | |
| CVE-2025-65516 | Seafile Community Edition 安全漏洞 | |
| CVE-2025-61148 | EduplusCampus 安全漏洞 | |
| CVE-2025-57210 | Weitong Mall 安全漏洞 |
Showing top 20 of 32 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2025-63499
Anonymous User
2026-04-16 21:22:48Just had a cracking arvo session playing crash casino games and honestly reckon it's pure adrenaline when you actually know when to cash out. Gave a crack <a href="https://rootskitchen.bar/">Vegazone online</a> this time and was pretty happy. Funded my account with Visa and noticed they also take PayID which is good to know. The multiplier climb gets your heart pumping — you have to keep your cool while also know when to bail. Unlike Mines, Plinko which I've also punted on, crash gives you that live decision-making buzz. Solid site for locals — have a squiz at https://rootskitchen.bar
Anonymous User
2026-04-18 06:00:33Just wrapped up a deadly arvo session punting on the crash format and honestly reckon nothing beats the rush when you work out the right time to cash out. Gave a crack <a href="https://rootskitchen.bar/">Vegazone casino</a> this time and was stoked. Funded my account with Visa and saw they also take Apple Pay which is good to know. The whole crash format is addictive as hell — you have to keep your cool while also know when to bail. Unlike Zeppelin, Goal which I've also punted on, this format gives you that real-time decision-making buzz. Ripper platform for Aussie players — worth a visit at https://rootskitchen.bar