Product by Alinto
Alinto SOGo
19 known vulnerabilities in Alinto SOGo (Alinto), 0 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2016-6188 | Alinto SOGo: Memory Leak | 6.5 | |
| High | CVE-2026-93453 | SOGo before 5.12.11 Password Reset Token Interception via Origin Header | 8.3 | |
| High | CVE-2015-5395 | Alinto SOGo: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2014-9905 | Alinto SOGo: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2016-6191 | Alinto SOGo: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2023-48104 | Alinto SOGo: security vulnerability | 6.1 | |
| High | CVE-2026-8851 | SOGo < 5.12.8 SQL Injection via addUserInAcls endpoint | 8.1 | |
| Medium | CVE-2016-6189 | Alinto SOGo: Information Disclosure | 4.3 | |
| High | CVE-2026-46446 | Alinto SOGo: SQL Injection | 7.1 | |
| High | CVE-2026-46445 | Alinto SOGo: SQL Injection | 7.1 | |
| Medium | CVE-2026-3054 | Alinto SOGo cross site scripting | 4.3 | |
| Medium | CVE-2024-24510 | Alinto SOGo: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2025-63499 | Alinto SOGo: Cross-site Scripting | 6.1 | |
| Medium | CVE-2025-71276 | Alinto SOGo: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-63498 | Alinto SOGo: Cross-site Scripting | 6.1 | |
| Medium | CVE-2024-34462 | Alinto SOGo: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2022-4558 | Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting | 3.5 | |
| Medium | CVE-2022-4556 | Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting | 3.5 | |
| Low | CVE-2026-33550 | Alinto SOGo: Use of Single-factor Authentication | 2.0 |