Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:evolution-ews:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductEvolution Ews (d1f8482b-17f1-5195-bbcb-4c1678d81f9b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/evolution-ews purl2cpe 2026-06-01 10:17:25.592691
pkg:deb/ubuntu/evolution-ews purl2cpe 2026-06-01 10:17:25.592694
pkg:github/gnome/evolution-ews purl2cpe 2026-06-01 10:17:25.592697
pkg:gitlab/gnome/evolution-ews purl2cpe 2026-06-01 10:17:25.592700
pkg:rpm/centos/evolution-ews purl2cpe 2026-06-01 10:17:25.592703
pkg:rpm/fedora/evolution-ews purl2cpe 2026-06-01 10:17:25.592705
pkg:rpm/opensuse/evolution-ews purl2cpe 2026-06-01 10:17:25.592708

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3890 vulnerable 2026-06-03 14:40:27.778581 Details available
HIGH (8.1)
It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.
Published: 2019-08-01T13:22:55.000Z
Updated: 2024-08-04T19:19:18.672Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.