Approved changes feed: RSS · Atom

cpe:2.3:a:kde:kmail:19.12.3:*:*:*:*:*:*:*

part: a version: 19.12.3 update: *

VendorKde (d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850)
ProductKmail (db0b0a89-7629-5a47-8858-696ecc94069f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/kde/kmail purl2cpe 2026-06-01 10:14:05.571510

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38373 vulnerable 2026-06-03 14:45:01.895830 Details available
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.
Published: 2021-08-10T14:51:25.000Z
Updated: 2024-08-04T01:37:16.503Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15954 vulnerable 2026-06-03 14:41:47.045438 Details available
KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use.
Published: 2020-07-27T06:06:47.000Z
Updated: 2024-08-04T13:30:23.551Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.